| AuthenticationContext | A context for accessing the currently-authenticated user. |
| RememberMeMode | Controls whether remember-me authentication is disabled, always performed or only performed when a checkbox is checked on the login form. |
| AuthenticationException | Base type for all exceptions which are thrown while processing user authentication attempts. |
| AuthenticationRequiredException | Indicates that authentication is required with applicationName and provides a URI to authenticate
|
| AuthenticationSystemException | A specialisation of AuthenticationException, thrown when the underlying authentication subsystem fails. |
| CaptchaAuthenticationException | Base specialisation for AuthenticationExceptions which are thrown for CAPTCHA attempts. |
| CaptchaRequiredAuthenticationException | A specialisation of CaptchaAuthenticationException, thrown to indicate the user has entered their password
incorrectly too many times in succession and is required to solve a CAPTCHA before they will be allowed to login
again. |
| ExpiredAuthenticationException | A specialization of AuthenticationException that should be thrown when an existing authentication has
expired. |
| ExpiredPasswordAuthenticationException | A specialisation of AuthenticationException, thrown to indicate the user cannot be authenticated because
their password has expired and must be changed. |
| InactiveUserAuthenticationException | A specialisation of AuthenticationException, thrown to indicate the user cannot be authenticated because
their account is no longer active. |
| IncorrectCaptchaAuthenticationException | A specialisation of CaptchaAuthenticationException, thrown when the CAPTCHA response provided by the user
does not match the image that was presented. |
| IncorrectPasswordAuthenticationException | A specialisation of AuthenticationException, thrown to indicate the password supplied during an
authentication attempt does not match the password on record. |
| NoAccessAuthenticationException | A specialisation of AuthenticationException, thrown to indicate the user cannot be authenticated because
they don't have permission to access the application. |