In this chapter, we added three pieces of configuration: ApiSecurityConfiguration, which configures our REST API to use basic HTTP authentication; WebSecurityConfiguration, which sets up a login form for our web users to sign in with either an account or with Twitter; and RedisConfig, which allows our sessions to be stored and retrieved from a Redis server.

In the authentication package, we added a LoginController class that redirects to our login page, a SignupController class that will be called the first time a user signs up with Twitter, and an AuthenticatingSignInAdapater class that will be called on every login with Twitter: