From aefc1579532b7b2f8589200d1b900cc21e061455 Mon Sep 17 00:00:00 2001 From: Steve Riesenberg Date: Wed, 9 Nov 2022 14:47:50 -0600 Subject: [PATCH] Add important note for SecurityContextRepository Issue gh-12049 --- docs/modules/ROOT/pages/migration.adoc | 5 +++++ 1 file changed, 5 insertions(+) diff --git a/docs/modules/ROOT/pages/migration.adoc b/docs/modules/ROOT/pages/migration.adoc index 6e7385f2cb..b7cdb711b5 100644 --- a/docs/modules/ROOT/pages/migration.adoc +++ b/docs/modules/ROOT/pages/migration.adoc @@ -255,6 +255,11 @@ fun securityFilterChain(http: HttpSecurity): SecurityFilterChain { ---- ==== +[IMPORTANT] +==== +If you are already using an implementation other than `HttpSessionSecurityContextRepository`, you should replace it with your chosen implementation in the example above to ensure that it is used along with `RequestAttributeSecurityContextRepository`. +==== + === Deprecation in SecurityContextRepository In Spring Security 5.7, a new method was added to xref:servlet/authentication/persistence.adoc#securitycontextrepository[`SecurityContextRepository`] with the signature: