RestoreOnRequestKey

SessionConfig

ResultUpdater

auth

Role

Authenticator

RootKey

CookieConfig SessionConfig

refine

GenericAuthenticationRefiner

resolveUser

Authenticator

restoreOnRequest

SessionConfig

restoreUser

Security

role

HasRole

role2Authority

HasSecurityProvider Security