Difference between isAuthenticated and isFullyAuthenticated
Actually, I think they explain better in the AuthenticatedVoter documentation:
The current
Authentication
will be inspected to determine if the principal has a particular level of authentication.The "FULLY" authenticated option means the user is authenticated fully (ie AuthenticationTrustResolver.isAnonymous(Authentication) is false and AuthenticationTrustResolver.isRememberMe(Authentication) is false.
The "REMEMBERED" will grant access if the principal was either authenticated via remember-me Or is fully authenticated. The "ANONYMOUSLY" will grant access if the principal was authenticated via remember-me, OR anonymously, OR via full authentication.
And in this table of their docs they mention:
isAuthenticated()
- Returns true if the user is not anonymous
isFullyAuthenticated()
- Returns true if the user is not an anonymous or a remember-me user
From the spring-security documentation:
isAuthenticated() Returns true if the user is not anonymous
isFullyAuthenticated() Returns true if the user is not an anonymous or a remember-me user