In this chapter, we added three pieces of configuration: ApiSecurityConfiguration
, which configures our REST API to use basic HTTP authentication; WebSecurityConfiguration
, which sets up a login form for our web users to sign in with either an account or with Twitter; and RedisConfig
, which allows our sessions to be stored and retrieved from a Redis server.
In the authentication package, we added a LoginController
class that redirects to our login page, a SignupController
class that will be called the first time a user signs up with Twitter, and an AuthenticatingSignInAdapater
class that will be called on every login with Twitter: