Deprecate Authorization Logic that uses FilterInvocation

Closes: gh-17781

Signed-off-by: Andrey Litvitski <[email protected]>

Author: therepanic

access/src/main/java/org/springframework/security/web/access/expression/DefaultWebSecurityExpressionHandler.java

@@ -32,7 +32,9 @@
  * @author Eddú Meléndez
  * @author Steve Riesenberg
  * @since 3.0
+ * @deprecated in favor of {@link DefaultHttpSecurityExpressionHandler}
  */
+@Deprecated(since = "7.0.0")
 public class DefaultWebSecurityExpressionHandler extends AbstractSecurityExpressionHandler<FilterInvocation>
 		implements SecurityExpressionHandler<FilterInvocation> {
 

web/src/main/java/org/springframework/security/web/access/expression/FilterInvocationExpressionRoot.java

@@ -28,7 +28,9 @@
 /**
  * @author Steve Riesenberg
  * @since 7.0
+ * @deprecated in favor of {@link WebSecurityExpressionRoot}
  */
+@Deprecated(since = "7.0.0")
 final class FilterInvocationExpressionRoot extends SecurityExpressionRoot<FilterInvocation> {
 
 	/**