Authorization is the process of granting authority to an authenticated user so that this user is allowed to
access particular resources of the target application. The authorization process must be performed after the
authentication process. Typically, authorities are granted in terms of roles.
authorization 授权
authentication 认证
An authentication provider authenticates a user and returns the authorities granted to this user.
