스프링 보안 : 잠금 및 활성화되지 않은 계정의 차이점은 무엇입니까?

Question

userDetails 인터페이스에는 동일하고 잠기고 활성화 된 것으로 보이는 두 가지 속성이 있습니다.

이것들이 다른 것 중 하나가 아닌가?

Answer 1

이것을 찾았습니다 오래된 Acegi 블로그 - 도움이되기를 바랍니다

Disabled indicates an account has been administratively or automatically disabled for some reason. Usually some action is required to release it.

Locked indicates an account has been automatically suspended due to invalid login attempts. Usually the passage of time or (less often) requesting manual unlocking is required to release it.

The distinction is not used by Acegi Security code aside from providing more informative errors to the user. There is also an order in which different exceptions should be returned, so that a disabled or locked account for instance will not return a bad credentials exception. Refer to the JavaDocs for more details.