Deprecate SecurityConfig

Closes gh-16773
This commit is contained in:
Josh Cummings 2025-03-19 17:32:17 -06:00
parent a884c3c906
commit 89bd670fb1
No known key found for this signature in database
GPG Key ID: 869B37A20E876129
2 changed files with 18 additions and 0 deletions

View File

@ -21,6 +21,8 @@ import java.util.List;
import org.springframework.beans.factory.BeanCreationException; import org.springframework.beans.factory.BeanCreationException;
import org.springframework.security.access.ConfigAttribute; import org.springframework.security.access.ConfigAttribute;
import org.springframework.security.access.SecurityConfig; import org.springframework.security.access.SecurityConfig;
import org.springframework.security.authorization.AuthorizationManager;
import org.springframework.security.core.annotation.SecurityAnnotationScanner;
import org.springframework.security.web.access.channel.ChannelDecisionManagerImpl; import org.springframework.security.web.access.channel.ChannelDecisionManagerImpl;
/** /**
@ -29,7 +31,14 @@ import org.springframework.security.web.access.channel.ChannelDecisionManagerImp
* *
* @author Luke Taylor * @author Luke Taylor
* @since 3.0 * @since 3.0
* @deprecated In modern Spring Security APIs, each API manages its own configuration
* context. As such there is no direct replacement for this interface. In the case of
* method security, please see {@link SecurityAnnotationScanner} and
* {@link AuthorizationManager}. In the case of channel security, please see
* {@code HttpsRedirectFilter}. In the case of web security, please see
* {@link AuthorizationManager}.
*/ */
@Deprecated
public final class ChannelAttributeFactory { public final class ChannelAttributeFactory {
private static final String OPT_REQUIRES_HTTP = "http"; private static final String OPT_REQUIRES_HTTP = "http";

View File

@ -20,6 +20,8 @@ import java.io.Serial;
import java.util.ArrayList; import java.util.ArrayList;
import java.util.List; import java.util.List;
import org.springframework.security.authorization.AuthorizationManager;
import org.springframework.security.core.annotation.SecurityAnnotationScanner;
import org.springframework.util.Assert; import org.springframework.util.Assert;
import org.springframework.util.StringUtils; import org.springframework.util.StringUtils;
@ -27,7 +29,14 @@ import org.springframework.util.StringUtils;
* Stores a {@link ConfigAttribute} as a <code>String</code>. * Stores a {@link ConfigAttribute} as a <code>String</code>.
* *
* @author Ben Alex * @author Ben Alex
* @deprecated In modern Spring Security APIs, each API manages its own configuration
* context. As such there is no direct replacement for this interface. In the case of
* method security, please see {@link SecurityAnnotationScanner} and
* {@link AuthorizationManager}. In the case of channel security, please see
* {@code HttpsRedirectFilter}. In the case of web security, please see
* {@link AuthorizationManager}.
*/ */
@Deprecated
public class SecurityConfig implements ConfigAttribute { public class SecurityConfig implements ConfigAttribute {
@Serial @Serial