Deprecated API

Contents

• Deprecated Classes
• Deprecated Fields
• Deprecated Methods
• Deprecated Constructors

Deprecated Classes

org.springframework.security.web.authentication.AbstractProcessingFilter
Use AbstractAuthenticationProcessingFilter instead.

org.springframework.security.web.authentication.AuthenticationProcessingFilter
Use UsernamePasswordAuthenticationFilter instead.

org.springframework.security.web.authentication.AuthenticationProcessingFilterEntryPoint
Use LoginUrlAuthenticationEntryPoint instead.

org.springframework.security.access.ConfigAttributeEditor

org.springframework.security.web.context.HttpSessionContextIntegrationFilter
Use SecurityContextPersistenceFilter instead.

org.springframework.security.access.vote.LabelBasedAclVoter
Use new spring-security-acl module instead

org.springframework.security.access.method.MethodSecurityMetadataSourceEditor
use method annotations or the protect-pointcut support from the namespace

org.springframework.security.web.authentication.preauth.PreAuthenticatedProcessingFilterEntryPoint
Use Http403ForbiddenEntryPoint instead.

org.springframework.security.access.hierarchicalroles.UserDetailsServiceWrapper
use a RoleHierarchyVoter instead of populating the user Authentication object with the additional authorities.

org.springframework.security.access.hierarchicalroles.UserDetailsWrapper
use a RoleHierarchyVoter instead.

Deprecated Fields

org.springframework.security.config.Elements.FILTER_INVOCATION_DEFINITION_SOURCE

Deprecated Methods

org.springframework.security.web.context.HttpSessionSecurityContextRepository.setCloneFromHttpSession(boolean)
Override the loadContext method and copy the created context instead.

org.springframework.security.authentication.dao.DaoAuthenticationProvider.setIncludeDetailsObject(boolean)
use AbstractAuthenticationManager.setClearExtraInformation(boolean)

org.springframework.security.web.access.intercept.FilterSecurityInterceptor.setObjectDefinitionSource(FilterInvocationSecurityMetadataSource)
use setSecurityMetadataSource instead

org.springframework.security.web.context.HttpSessionSecurityContextRepository.setSecurityContextClass(Class)

org.springframework.security.cas.authentication.CasAuthenticationProvider.setUserDetailsService(UserDetailsService)

Deprecated Constructors

org.springframework.security.authentication.AnonymousAuthenticationToken(String, Object, GrantedAuthority[])
use the second constructor

org.springframework.security.access.intercept.aopalliance.MethodSecurityMetadataSourceAdvisor(MethodSecurityInterceptor)
use the decoupled approach instead

org.springframework.security.core.userdetails.User(String, String, boolean, boolean, boolean, boolean, GrantedAuthority[])

org.springframework.security.authentication.UsernamePasswordAuthenticationToken(Object, Object, GrantedAuthority[])
use the list of authorities version