Document SecurityContextRepository default

Closes gh-12049
This commit is contained in:
Steve Riesenberg 2022-11-09 14:49:15 -06:00
parent 3343476dd3
commit 63cf954e07
No known key found for this signature in database
GPG Key ID: 5F311AB48A55D521
1 changed files with 7 additions and 0 deletions

View File

@ -30,6 +30,13 @@ If you are explicitly opting into Spring Security 6's new defaults, the followin
include::partial$servlet/architecture/security-context-explicit.adoc[]
=== Multiple SecurityContextRepository
In Spring Security 5, the default xref:servlet/authentication/persistence.adoc#securitycontextrepository[`SecurityContextRepository`] was `HttpSessionSecurityContextRepository`.
In Spring Security 6, the default `SecurityContextRepository` is `DelegatingSecurityContextRepository`.
If you configured the `SecurityContextRepository` only for the purpose of updating to 6.0, you can remove it completely.
[[requestcache-query-optimization]]
=== Optimize Querying of `RequestCache`