fix #3: Add check password method

securityPrj/src/main/java/tody/common/service/CustomAuthenticationProvider.java

@@ -5,6 +5,7 @@
 import org.apache.log4j.Logger;
 import org.springframework.beans.factory.annotation.Autowired;
 import org.springframework.security.authentication.AuthenticationProvider;
+import org.springframework.security.authentication.BadCredentialsException;
 import org.springframework.security.authentication.UsernamePasswordAuthenticationToken;
 import org.springframework.security.core.Authentication;
 import org.springframework.security.core.AuthenticationException;
@@ -30,12 +31,20 @@ public Authentication authenticate(Authentication authentication) throws Authent
 		CustomUserDetails user = (CustomUserDetails) userDeSer.loadUserByUsername(username);
 		Collection<GrantedAuthority> authorities = (Collection<GrantedAuthority>) user.getAuthorities();
 
+		if(!matchPassword(username, user.getPassword())) {
+			throw new BadCredentialsException(username);
+		}
+
 		return new UsernamePasswordAuthenticationToken(username, password, authorities);
 	}
 
 	@Override
 	public boolean supports(Class<?> authentication) {
 		return true;
 	}
+
+	private boolean matchPassword(String loginPwd, String password) {
+		return loginPwd.equals(password);
+	}
 
 }