bael-6473: upgrade Spring Security to 6

spring-reactive-modules/spring-reactive/src/main/java/com/baeldung/reactive/debugging/consumer/ConsumerDebuggingApplication.java

@@ -24,10 +24,10 @@ public class ConsumerDebuggingApplication {
 
     @Bean
     public SecurityWebFilterChain debuggingConsumerSpringSecurityFilterChain(ServerHttpSecurity http) {
-        http.authorizeExchange()
+        http.authorizeExchange(exchanges  -> exchanges
-            .anyExchange()
+          .anyExchange()
-            .permitAll();
+          .permitAll());
-        http.csrf().disable();
+        http.csrf(csrf -> csrf.disable());
         return http.build();
     }
 }

spring-reactive-modules/spring-reactive/src/main/java/com/baeldung/reactive/debugging/server/ServerDebuggingApplication.java

@@ -22,9 +22,9 @@ public class ServerDebuggingApplication {
     
     @Bean
     public SecurityWebFilterChain debuggingServerSpringSecurityFilterChain(ServerHttpSecurity http) {
-        http.authorizeExchange()
+        http.authorizeExchange(exchanges  -> exchanges
-            .anyExchange()
+          .anyExchange()
-            .permitAll();
+          .permitAll());
         return http.build();
     }
 }

spring-reactive-modules/spring-reactive/src/main/java/com/baeldung/reactive/security/SecurityConfig.java

@@ -1,6 +1,7 @@
 package com.baeldung.reactive.security;
 
 import org.springframework.context.annotation.Bean;
+import org.springframework.context.annotation.Configuration;
 import org.springframework.security.config.annotation.method.configuration.EnableReactiveMethodSecurity;
 import org.springframework.security.config.annotation.web.reactive.EnableWebFluxSecurity;
 import org.springframework.security.config.web.server.ServerHttpSecurity;
@@ -12,18 +13,19 @@ import org.springframework.security.crypto.password.PasswordEncoder;
 import org.springframework.security.web.server.SecurityWebFilterChain;
 
 @EnableWebFluxSecurity
+@Configuration
 @EnableReactiveMethodSecurity
 public class SecurityConfig {
 
     @Bean
     public SecurityWebFilterChain securityWebFilterChain(ServerHttpSecurity http) {
-        return http.authorizeExchange()
+        return http
-          .pathMatchers("/admin").hasAuthority("ROLE_ADMIN")
+          .authorizeExchange(exchanges  -> exchanges
-          .anyExchange().authenticated()
+            .pathMatchers("/admin").hasAuthority("ROLE_ADMIN")
-          .and()
+            .anyExchange().authenticated())
-          .formLogin()
+          .formLogin(formLogin -> formLogin
-          .and()
+            .loginPage("/login"))
-          .csrf().disable()
+          .csrf(csrf -> csrf.disable())
           .build();
     }
 

spring-reactive-modules/spring-reactive/src/main/java/com/baeldung/reactive/webclient/WebClientApplication.java

@@ -16,9 +16,8 @@ public class WebClientApplication {
 
     @Bean
     public SecurityWebFilterChain filterChain(ServerHttpSecurity http) {
-        http.csrf().disable()
+        http.csrf(csrf -> csrf.disable())
-          .authorizeExchange()
+          .authorizeExchange(exchanges  -> exchanges.anyExchange().permitAll());
-          .anyExchange().permitAll();
         return http.build();
     }
 }

spring-reactive-modules/spring-reactive/src/main/java/com/baeldung/reactive/webflux/annotation/EmployeeWebSecurityConfig.java

@@ -1,7 +1,9 @@
 package com.baeldung.reactive.webflux.annotation;
 
 import org.springframework.context.annotation.Bean;
+import org.springframework.context.annotation.Configuration;
 import org.springframework.http.HttpMethod;
+import org.springframework.security.config.Customizer;
 import org.springframework.security.config.annotation.web.reactive.EnableWebFluxSecurity;
 import org.springframework.security.config.web.server.ServerHttpSecurity;
 import org.springframework.security.core.userdetails.MapReactiveUserDetailsService;
@@ -12,6 +14,7 @@ import org.springframework.security.crypto.password.PasswordEncoder;
 import org.springframework.security.web.server.SecurityWebFilterChain;
 
 @EnableWebFluxSecurity
+@Configuration
 public class EmployeeWebSecurityConfig {
 
     @Bean
@@ -27,12 +30,11 @@ public class EmployeeWebSecurityConfig {
     @Bean
     public SecurityWebFilterChain springSecurityFilterChain(ServerHttpSecurity http) {
         http
-          .csrf().disable()
+          .csrf(csrf -> csrf.disable())
-          .authorizeExchange()
+          .authorizeExchange(exchanges -> exchanges
             .pathMatchers(HttpMethod.POST, "/employees/update").hasRole("ADMIN")
-            .pathMatchers("/**").permitAll()
+            .pathMatchers("/**").permitAll())
-          .and()
+          .httpBasic(Customizer.withDefaults());
-          .httpBasic();
         return http.build();
     }