Skip to content
This repository has been archived by the owner on Jun 7, 2024. It is now read-only.

Spring security architecture guide describes old auto configuration from Spring Boot 1.x #19

Open
aashaysaralkar opened this issue Oct 14, 2021 · 0 comments

Comments

@aashaysaralkar
Copy link

Spring security architecture guide needs to be changed to reflect the simplification done to the security auto configuration in Spring Boot 2.x. Documentation says:

A vanilla Spring Boot application with no custom security configuration has a several (call it n) filter chains, where usually n=6. The first (n-1) chains are there just to ignore static resource patterns, like /css/** and /images/**, and the error view: /error.

But SpringBootWebSecurityConfiguration no longer ignores them explicitly after the change in 2.6.0-M3 with this commit and every thing is secured by default in a vanilla setup with a single SecurityFilterChain via import of WebSecurityConfiguration

Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Labels
None yet
Development

No branches or pull requests

1 participant