Migration Recipe for Spring Security 7.0

[ghusta]

Hello

Spring Security 7.0 is about to be released (https://github.com/spring-projects/spring-security/releases/tag/7.0.0). It will also be included in Spring Boot 4.0.

• See also previous version with Migration Recipe for Spring Security 6.4 & 6.5, deprecations ahead of 7.0 #793.

---

See:

• https://docs.spring.io/spring-security/reference/7.0/migration/index.html
• https://spring.io/blog/2025/09/11/spring-authorization-server-moving-to-spring-security-7-0

[timtebeek]

Thanks a lot! Good to keep track; reading the notes there's likely some more steps needed beyond the scaffold. I'll tag this as good first issue for folks looking to add to the recipe you've already added.

[ghusta]

Thank you.
There are still some migrations from 6.5 to 7.0 to be done, indeed.

I forgot maybe the most important page in 7.0 (https://docs.spring.io/spring-security/reference/7.0/whats-new.html),
where there are a long list of removals and additions.

Like for example the replacement of AuthorizationManager#check by AuthorizationManager#authorize, with some significant changes in the signature...

[Swarna7414]

please assign this Migration task to me : )

[timtebeek]

Sure, as soon as there's a draft PR we'll assign the issue. That way the issue is open to anyone until there is work in progress.