SEC-2763: Make JdbcUserDetailsManager extensible

[spring-projects-issues]

Mauro Molinari (Migrated from SEC-2763) said:

JdbcUserDetailsManager is not easily extensible:

• query strings are private and there are no getter methods
• insertUserAuthorities(UserDetails) and deleteUserAuthorities(String) are private
• userCache is private and there is no getter method
• other useful methods like validateUserDetails(UserDetails) and validateAuthorities(Collection<? extends GrantedAuthority>) are also private...

This is in contrast with JdbcDaoImpl whose design is much better from this point of view, except for org.springframework.security.core.userdetails.jdbc.JdbcDaoImpl.groupAuthoritiesByUsernameQuery which also misses a getter method.

[spring-projects-issues]

Mauro Molinari said:

By the way, is the userCache supposed to be filled in by other Spring Security components? I find no puts in JdbcUserDetailsManager, while I would have expected something like that in the load method...