1, when loading the configuration file definition, determine which authenticationmanager to use
When the configuration file Security.xml is loaded, a providermanager is created first, and then
If you configured the default Authenauthmanager (HTTP attribute authentication-manager-ref), use the default as the parent of Providermanager
If no default authenauthmanager (HTTP attribute authentication-manager-ref) is configured, Providermanager's parent is null
Authentication will authenticate itself first, then if the parent is not empty, then the authentication parent.
2. When filtering access requests, each filter uses that AuthenticationManager
Tracking Debug Filterchainproxy filterchains (getfilters), you can see that the filter uses the kind of AuthenticationManager
OAuth2.0 Learning (4-11) spring-oauth-server analysis-what kind of authenticationmanager is used by HTTP elements?