Spring Security: Upgrading deprecated WebSecurityConfigurerAdapter

[bdr0id]

SecurityConfig.java

@Configuration
public class SecurityConfig extends WebSecurityConfigurerAdapter{
      //is deprecated 
}

[github-actions[bot]]

Welcome @l00pinfinity to Spring-Boot-Blog-REST-API community! Thanks so much for creating your first issue :)

[OmarShezan]

you can use SecurityFilterChain instead and remove reference to WebSecurityConfigurerAdapter

@Bean public SecurityFilterChain securityFilterChain(HttpSecurity http) throws Exception { http .cors(Customizer.withDefaults()) .csrf(AbstractHttpConfigurer::disable) .exceptionHandling(ex -> ex.authenticationEntryPoint(unauthorizedHandler)) .sessionManagement(session -> session.sessionCreationPolicy(SessionCreationPolicy.STATELESS)) .authorizeHttpRequests(auth -> auth .requestMatchers(HttpMethod.GET, "/api/**").permitAll() .requestMatchers(HttpMethod.POST, "/api/auth/**").permitAll() .anyRequest().authenticated() ) .addFilterBefore(jwtAuthenticationFilter, UsernamePasswordAuthenticationFilter.class); return http.build(); }