12.4 Security configuration

12.4.1 Intro

Kauri Security is configured through a central configuration file called auth.xml, which contains references to Spring beans for delivering actual authentication and authorization logic.

While you can specify both authentication and authorization conditions in the auth.xml, one will often do more detailed authorization checks in e.g. resource classes, based on the established security context.