anchor.diff:  See xref:security-testing.adoc[Security Testing] for more information about testing Quarkus Security.
   
   == Secret Engines
  +
   === Vault
   Quarkus provides a very comprehensive HashiCorp Vault support, please see the link:{vault-guide}[Quarkus and HashiCorp Vault] documentation for more information.
   
  
positive.code: == Architecture
  
  `HttpAuthenticationMechanism` is the main entry into Quarkus HTTP Security.
     
  Quarkus Security Manager uses `HttpAuthenticationMechanism` to extract the authentication credentials from the HTTP request and delegates to `IdentityProvider` to
  complete the conversion of these credentials to `SecurityIdentity`.
  
  
negative.code: === WebAuthn Authentication Mechanism
  
  https://webauthn.guide/[WebAuthn] is an authentication mechanism designed to replace passwords. In short, every
  time you write a service for registering new users, or logging them in, instead of asking for a password, you use WebAuthn, which will replace the password.
  
  Please see xref:security-webauthn.adoc[our dedicated WebAuthn documentation] for more information.
  
  