security-7-migration: add javap inspection output, link the article

Co-Authored-By: Claude Sonnet 5.5 <[email protected]>
Claude-Session: https://claude.ai/code/session_01YPgGH6aMbSLANL3E2HHmS6

security-7-migration/output/08-javap-encoder-and-manager.txt

@@ -0,0 +1,15 @@
+== Spring Security 6.5.11: BCryptPasswordEncoder
+  public java.lang.String encode(java.lang.CharSequence);
+  public boolean matches(java.lang.CharSequence, java.lang.String);
+  public boolean upgradeEncoding(java.lang.String);
+== Spring Security 6.5.11: AuthorizationManager
+  public abstract authorization.AuthorizationDecision check(java.util.function.Supplier<core.Authentication>, T);
+  public default authorization.AuthorizationResult authorize(java.util.function.Supplier<core.Authentication>, T);
+
+== Spring Security 7.1.2: BCryptPasswordEncoder
+  protected java.lang.String encodeNonNullPassword(java.lang.String);
+  protected boolean matchesNonNull(java.lang.String, java.lang.String);
+  protected boolean upgradeEncodingNonNull(java.lang.String);
+== Spring Security 7.1.2: AuthorizationManager
+  public abstract authorization.AuthorizationResult authorize(java.util.function.Supplier<? extends core.Authentication>, T);
+

security-7-migration/scripts/inspect-jars.sh

@@ -0,0 +1,14 @@
+#!/usr/bin/env bash
+# Shows two signatures that api_diff.py reports as "removed", straight from javap, so the report can be read correctly.
+set -u
+cd "$(dirname "$0")/.."
+J=target/jars
+{
+  for v in 6.5.11 7.1.2; do
+    echo "== Spring Security $v: BCryptPasswordEncoder"
+    javap -protected -cp $J/spring-security-crypto-$v.jar org.springframework.security.crypto.bcrypt.BCryptPasswordEncoder 2>/dev/null | grep -E "encode|matches|upgradeEncoding"
+    echo "== Spring Security $v: AuthorizationManager"
+    javap -protected -cp $J/spring-security-core-$v.jar org.springframework.security.authorization.AuthorizationManager 2>/dev/null | grep -E "check|authorize"
+    echo
+  done
+} | sed 's/org\.springframework\.security\.//g' > output/08-javap-encoder-and-manager.txt

security-7-migration/scripts/run-all.sh

@@ -5,3 +5,4 @@ cd "$(dirname "$0")/.."
 python3 scripts/api_diff.py
 ./scripts/compile-old-apis.sh
 ./scripts/run-probes.sh
+./scripts/inspect-jars.sh