Why should userid and pwd be in applicationContext?

[jwy923]

I am a beginner for Spring Security.

I have a quick question.....

I don't understand why there are userid and pwd information of users in the applicationContext file?

Whenever we have a new user, do we need to automatically update the applicationContext file?

[chudak]

You are probably referring to the example user service? In the real world, you would normally store your user information (credentials, roles) in a data base. However, you could store them in the application context config if your needs were simple..