Browse Source

Polish Method Security Preparation Steps

- Add instruction to declare 5.8 defaults

Issue gh-11337
pull/12099/head
Josh Cummings 3 years ago
parent
commit
e900ca3a86
No known key found for this signature in database
GPG Key ID: A306A51F43B8E5A5
  1. 45
      docs/modules/ROOT/pages/migration.adoc

45
docs/modules/ROOT/pages/migration.adoc

@ -519,11 +519,47 @@ xref:reactive/authorization/method.adoc[Method Security] has been xref:reactive/ @@ -519,11 +519,47 @@ xref:reactive/authorization/method.adoc[Method Security] has been xref:reactive/
'''
In Spring Security 5.8, `useAuthorizationManager` was added to {security-api-url}org/springframework/security/config/annotation/method/configuration/EnableReactiveMethodSecurity.html[`@EnableReactiveMethodSecurity`] to allow applications to opt in to ``AuthorizationManager``'s features.
==== Declare the 5.8 default
First, declare the 5.8 default:
====
.Java
[source,java,role="primary"]
----
@EnableReactiveMethodSecurity
----
.Kotlin
[source,kotlin,role="secondary"]
----
@EnableReactiveMethodSecurity
----
====
to:
====
.Java
[source,java,role="primary"]
----
@EnableReactiveMethodSecurity(useAuthorizationManager = false)
----
.Kotlin
[source,kotlin,role="secondary"]
----
@EnableReactiveMethodSecurity(useAuthorizationManager = false)
----
====
This is helpful because, if the remaining preparation steps cannot be taken, you can still upgrade to 6.0 while keeping this feature as-is.
[[reactive-change-to-useauthorizationmanager]]
==== Change `useAuthorizationManager` to `true`
In Spring Security 5.8, `useAuthorizationManager` was added to {security-api-url}org/springframework/security/config/annotation/method/configuration/EnableReactiveMethodSecurity.html[`@EnableReactiveMethodSecurity`] to allow applications to opt-in to ``AuthorizationManager``'s features.
To opt in, change `useAuthorizationManager` to `true` like so:
====
@ -556,11 +592,6 @@ changes to: @@ -556,11 +592,6 @@ changes to:
----
====
[NOTE]
=====
In 6.0, `useAuthorizationManager` defaults to `true`.
=====
'''
[[reactive-check-for-annotationconfigurationexceptions]]

Loading…
Cancel
Save