vaadin / flow-crm-tutorial

Demo app for the Java Web App tutorial series
The Unlicense
172 stars 185 forks source link

SecurityConfig.java - 'authorizeHttpRequests()' is deprecated and marked for removal #161

Closed trucke closed 1 year ago

trucke commented 1 year ago

Hey guys,

Want to check if this is already on your list. The method will also be removed in a future version. I am using openJDK 17, the latest version of IntelliJ (2023.1.3) and the latest Spring Security version.

This point is also stated in the Spring migration guide, Spring Security.

Based on this guide the call should be changed to:

http.authorizeHttpRequests((authz) -> authz
                .requestMatchers("/images/*.png").permitAll());
mcollovati commented 1 year ago

Hi, thanks for the issue.

Here's the issue on Flow repo https://github.com/vaadin/flow/issues/16872

And the PR, that is currently under review https://github.com/vaadin/flow/pull/17136