Add security-7-migration module: Spring Security 6.5.11 vs 7.1.2 jar diff, compile checks and runtime probes

Co-Authored-By: Claude Sonnet 5.5 <[email protected]> Claude-Session: https://claude.ai/code/session_01YPgGH6aMbSLANL3E2HHmS6
2026-10-25 19:00:27 +00:00
parent d1b9339951
commit e47787ecaa
25 changed files with 1428 additions and 0 deletions
@@ -0,0 +1,39 @@
+Spring Security 6.5.11, compiling OldSecurity.java
+src/compat/OldSecurity.java:16: warning: [deprecation] EnableGlobalMethodSecurity in org.springframework.security.config.annotation.method.configuration has been deprecated
+@EnableGlobalMethodSecurity(prePostEnabled = true)
+ ^
+warning: [deprecation] ExpressionUrlAuthorizationConfigurer in org.springframework.security.config.annotation.web.configurers has been deprecated
+warning: [deprecation] ExpressionUrlAuthorizationConfigurer.ExpressionInterceptUrlRegistry in ExpressionUrlAuthorizationConfigurer has been deprecated
+src/compat/OldSecurity.java:20: warning: [removal] authorizeRequests(Customizer<ExpressionUrlAuthorizationConfigurer<HttpSecurity>.ExpressionInterceptUrlRegistry>) in HttpSecurity has been deprecated and marked for removal
+        http.authorizeRequests(a -> a.anyRequest().authenticated());
+            ^
+src/compat/OldSecurity.java:24: warning: [removal] csrf() in HttpSecurity has been deprecated and marked for removal
+        http.csrf().disable().headers().frameOptions().sameOrigin();
+            ^
+src/compat/OldSecurity.java:24: warning: [removal] headers() in HttpSecurity has been deprecated and marked for removal
+        http.csrf().disable().headers().frameOptions().sameOrigin();
+                             ^
+src/compat/OldSecurity.java:24: warning: [removal] frameOptions() in HeadersConfigurer has been deprecated and marked for removal
+        http.csrf().disable().headers().frameOptions().sameOrigin();
+                                       ^
+  where H is a type-variable:
+    H extends HttpSecurityBuilder<H> declared in class HeadersConfigurer
+src/compat/OldSecurity.java:28: warning: [removal] AntPathRequestMatcher in org.springframework.security.web.util.matcher has been deprecated and marked for removal
+        return new AntPathRequestMatcher("/api/**");
+                   ^
+src/compat/OldSecurity.java:32: warning: [deprecation] DaoAuthenticationProvider() in DaoAuthenticationProvider has been deprecated
+        DaoAuthenticationProvider p = new DaoAuthenticationProvider();
+                                      ^
+src/compat/OldSecurity.java:33: warning: [deprecation] setUserDetailsService(UserDetailsService) in DaoAuthenticationProvider has been deprecated
+        p.setUserDetailsService(users);
+         ^
+src/compat/OldSecurity.java:38: warning: [removal] PASSWORD in AuthorizationGrantType has been deprecated and marked for removal
+        return AuthorizationGrantType.PASSWORD;
+                                     ^
+src/compat/OldSecurity.java:43: warning: [deprecation] check(Supplier<Authentication>,T) in AuthorizationManager has been deprecated
+        public AuthorizationDecision check(Supplier<Authentication> authentication, RequestAuthorizationContext ctx) {
+                                     ^
+  where T is a type-variable:
+    T extends Object declared in interface AuthorizationManager
+12 warnings
+javac exit status: 0