diff --git a/config/src/main/java/org/springframework/security/config/http/ChannelAttributeFactory.java b/config/src/main/java/org/springframework/security/config/http/ChannelAttributeFactory.java index 0030a34dce..4b265c7a3d 100644 --- a/config/src/main/java/org/springframework/security/config/http/ChannelAttributeFactory.java +++ b/config/src/main/java/org/springframework/security/config/http/ChannelAttributeFactory.java @@ -21,6 +21,8 @@ import java.util.List; import org.springframework.beans.factory.BeanCreationException; import org.springframework.security.access.ConfigAttribute; import org.springframework.security.access.SecurityConfig; +import org.springframework.security.authorization.AuthorizationManager; +import org.springframework.security.core.annotation.SecurityAnnotationScanner; import org.springframework.security.web.access.channel.ChannelDecisionManagerImpl; /** @@ -29,7 +31,14 @@ import org.springframework.security.web.access.channel.ChannelDecisionManagerImp * * @author Luke Taylor * @since 3.0 + * @deprecated In modern Spring Security APIs, each API manages its own configuration + * context. As such there is no direct replacement for this interface. In the case of + * method security, please see {@link SecurityAnnotationScanner} and + * {@link AuthorizationManager}. In the case of channel security, please see + * {@code HttpsRedirectFilter}. In the case of web security, please see + * {@link AuthorizationManager}. */ +@Deprecated public final class ChannelAttributeFactory { private static final String OPT_REQUIRES_HTTP = "http"; diff --git a/core/src/main/java/org/springframework/security/access/SecurityConfig.java b/core/src/main/java/org/springframework/security/access/SecurityConfig.java index 2cbc640b3a..7f471d1ef7 100644 --- a/core/src/main/java/org/springframework/security/access/SecurityConfig.java +++ b/core/src/main/java/org/springframework/security/access/SecurityConfig.java @@ -20,6 +20,8 @@ import java.io.Serial; import java.util.ArrayList; import java.util.List; +import org.springframework.security.authorization.AuthorizationManager; +import org.springframework.security.core.annotation.SecurityAnnotationScanner; import org.springframework.util.Assert; import org.springframework.util.StringUtils; @@ -27,7 +29,14 @@ import org.springframework.util.StringUtils; * Stores a {@link ConfigAttribute} as a String. * * @author Ben Alex + * @deprecated In modern Spring Security APIs, each API manages its own configuration + * context. As such there is no direct replacement for this interface. In the case of + * method security, please see {@link SecurityAnnotationScanner} and + * {@link AuthorizationManager}. In the case of channel security, please see + * {@code HttpsRedirectFilter}. In the case of web security, please see + * {@link AuthorizationManager}. */ +@Deprecated public class SecurityConfig implements ConfigAttribute { @Serial