Java-Security (D): User Authentication usage, source code analysis process

The first article we configure applicationContext-shiro.xml in the accounts, passwords, user rights, so we know the configuration is written dead, save the accounts, passwords, permissions to the database or other systems in real projects, how to achieve it? In addition, Spring Security Project in the user authentication process is how to implement it? Let's take these two issues to read this article.