Spring Security upgrade to 5.7.x

Problem Description

WebSecurityConfigurerAdapterClass is a class often used in Spring Security, which is used to quickly configure WebSecurity. After upgrading to version 5.7, this class was abandoned, so some APIs provided could not be used. Provide what you need to do after upgrading Spring Security.

solution

The original configuration class:

@Configuration
public class SpringSecurityConfig extends WebSecurityConfigurerAdapter {
    @Override
    public void configure(HttpSecurity http) throws Exception {
        http.csrf().disable(); // omit other httpsecurity configuration
    }

		@Override
		public void configure(WebSecurity web) throws Exception {
				web.ignoring().antMatchers("/url");
		}
}

The original configuration class cancels inheritanceWebSecurityConfigurerAdapter

@Configuration
public class SpringSecurityConfig {
    @Override
    public void configure(HttpSecurity http) throws Exception {
        http.csrf().disable(); // omit other httpsecurity configuration
    }

		@Override
		public void configure(WebSecurity web) throws Exception {
				web.ignoring().antMatchers("/url");
		}
}

Re -configure HTTPSECURITY and WebSecurity

After completing the previous step, the abnormality of the Bean of the HTTPSECURITY type may not be found at runtime, so you need to add it to the original configuration class@EnableWebSecurityNote and modify the original configuration method at the same time. code show as below:

@Configuration
@EnableWebSecurity  // If you can't find the abnormality of the HTTPSECURITY type bean, add this annotation
public class SpringSecurityConfig {
    @Bean
		public SecurityFilterChain filterChain(HttpSecurity http) throws Exception {
				http.csrf().disable();
				return http.build();
		}

		@Bean
    public WebSecurityCustomizer webSecurityCustomizer() {
        return (web) -> web.ignoring().antMatchers("/url");
    }
}

ConfigurationAuthenticationManager(key step)

After completing the above steps, there may still be an error in the authenticationManager type bean that may not be found. At this time, this bean needs to be exposed. The code is as follows:

@Configuration
@EnableWebSecurity  // If you can't find the abnormality of the HTTPSECURITY type bean, add this annotation
public class SpringSecurityConfig {
    @Bean
		public SecurityFilterChain filterChain(HttpSecurity http) throws Exception {
				http.csrf().disable();
				return http.build();
		}

		@Bean
    public WebSecurityCustomizer webSecurityCustomizer() {
        return (web) -> web.ignoring().antMatchers("/url");
    }

		@Bean
		public AuthenticationManager authenticationManager(AuthenticationConfiguration configuration) throws Exception {
        return configuration.getAuthenticationManager();
    }
}

At this time, the code can run successfully and no longer report an error.