I am trying to implement a role management for in spring boot APIs. I went through the link but I could not get the below details
1. Here they are using @Secured, I am not sure when actually role verification is called
Because there is a separate server which has the Role and Authorities details, Hence I want to call External Server to fetch the role and verify the Authorities ? here external server will give role details like userid and roles and allowed action like Delete, Create etc .
2. how the username or userid is fetched while validating the access ?