mirror of
https://github.com/spring-projects/spring-security.git
synced 2025-05-31 01:02:14 +00:00
Polish Method Security Preparation Steps
- Add instruction to declare 5.8 defaults Issue gh-11337
This commit is contained in:
parent
b4974bbce9
commit
e900ca3a86
@ -519,11 +519,47 @@ xref:reactive/authorization/method.adoc[Method Security] has been xref:reactive/
|
|||||||
|
|
||||||
'''
|
'''
|
||||||
|
|
||||||
|
In Spring Security 5.8, `useAuthorizationManager` was added to {security-api-url}org/springframework/security/config/annotation/method/configuration/EnableReactiveMethodSecurity.html[`@EnableReactiveMethodSecurity`] to allow applications to opt in to ``AuthorizationManager``'s features.
|
||||||
|
|
||||||
|
==== Declare the 5.8 default
|
||||||
|
|
||||||
|
First, declare the 5.8 default:
|
||||||
|
|
||||||
|
====
|
||||||
|
.Java
|
||||||
|
[source,java,role="primary"]
|
||||||
|
----
|
||||||
|
@EnableReactiveMethodSecurity
|
||||||
|
----
|
||||||
|
|
||||||
|
.Kotlin
|
||||||
|
[source,kotlin,role="secondary"]
|
||||||
|
----
|
||||||
|
@EnableReactiveMethodSecurity
|
||||||
|
----
|
||||||
|
====
|
||||||
|
|
||||||
|
to:
|
||||||
|
|
||||||
|
====
|
||||||
|
.Java
|
||||||
|
[source,java,role="primary"]
|
||||||
|
----
|
||||||
|
@EnableReactiveMethodSecurity(useAuthorizationManager = false)
|
||||||
|
----
|
||||||
|
|
||||||
|
.Kotlin
|
||||||
|
[source,kotlin,role="secondary"]
|
||||||
|
----
|
||||||
|
@EnableReactiveMethodSecurity(useAuthorizationManager = false)
|
||||||
|
----
|
||||||
|
====
|
||||||
|
|
||||||
|
This is helpful because, if the remaining preparation steps cannot be taken, you can still upgrade to 6.0 while keeping this feature as-is.
|
||||||
|
|
||||||
[[reactive-change-to-useauthorizationmanager]]
|
[[reactive-change-to-useauthorizationmanager]]
|
||||||
==== Change `useAuthorizationManager` to `true`
|
==== Change `useAuthorizationManager` to `true`
|
||||||
|
|
||||||
In Spring Security 5.8, `useAuthorizationManager` was added to {security-api-url}org/springframework/security/config/annotation/method/configuration/EnableReactiveMethodSecurity.html[`@EnableReactiveMethodSecurity`] to allow applications to opt-in to ``AuthorizationManager``'s features.
|
|
||||||
|
|
||||||
To opt in, change `useAuthorizationManager` to `true` like so:
|
To opt in, change `useAuthorizationManager` to `true` like so:
|
||||||
|
|
||||||
====
|
====
|
||||||
@ -556,11 +592,6 @@ changes to:
|
|||||||
----
|
----
|
||||||
====
|
====
|
||||||
|
|
||||||
[NOTE]
|
|
||||||
=====
|
|
||||||
In 6.0, `useAuthorizationManager` defaults to `true`.
|
|
||||||
=====
|
|
||||||
|
|
||||||
'''
|
'''
|
||||||
|
|
||||||
[[reactive-check-for-annotationconfigurationexceptions]]
|
[[reactive-check-for-annotationconfigurationexceptions]]
|
||||||
|
Loading…
x
Reference in New Issue
Block a user