Package org.springframework.security.config.annotation.web.configuration

Class WebSecurityConfigurerAdapter

java.lang.Object
org.springframework.security.config.annotation.web.configuration.WebSecurityConfigurerAdapter
All Implemented Interfaces:
SecurityConfigurer<javax.servlet.Filter,WebSecurity>, WebSecurityConfigurer<WebSecurity>
@Order(100) @Deprecated public abstract class WebSecurityConfigurerAdapter extends Object implements WebSecurityConfigurer<WebSecurity>
Deprecated.
Use a SecurityFilterChain Bean to configure HttpSecurity or a WebSecurityCustomizer Bean to configure WebSecurity. 
     @Bean
     public SecurityFilterChain securityFilterChain(HttpSecurity http) throws Exception {
         http
             .authorizeHttpRequests((authz) ->
                 authz.anyRequest().authenticated()
             );
             // ...
         return http.build();
     }

    @Bean
    public WebSecurityCustomizer webSecurityCustomizer() {
        return (web) -> web.ignoring().antMatchers("/resources/**");
    }
See the Spring Security without WebSecurityConfigurerAdapter for more details.
Provides a convenient base class for creating a WebSecurityConfigurer instance. The implementation allows customization by overriding methods.

Will automatically apply the result of looking up AbstractHttpConfigurer from SpringFactoriesLoader to allow developers to extend the defaults. To do this, you must create a class that extends AbstractHttpConfigurer and then create a file in the classpath at "META-INF/spring.factories" that looks something like: 

 org.springframework.security.config.annotation.web.configurers.AbstractHttpConfigurer = sample.MyClassThatExtendsAbstractHttpConfigurer
If you have multiple classes that should be added you can use "," to separate the values. For example: 
 org.springframework.security.config.annotation.web.configurers.AbstractHttpConfigurer = sample.MyClassThatExtendsAbstractHttpConfigurer, sample.OtherThatExtendsAbstractHttpConfigurer
See Also: