From 927f55ed800ff3bd36da7076a02ed31fc84d14ec Mon Sep 17 00:00:00 2001 From: Andrey Litvitski Date: Sun, 14 Sep 2025 22:21:59 +0300 Subject: [PATCH] Deprecate Authorization Logic that uses `FilterInvocation` Closes: gh-17781 Signed-off-by: Andrey Litvitski --- .../access/expression/DefaultWebSecurityExpressionHandler.java | 2 ++ .../web/access/expression/FilterInvocationExpressionRoot.java | 2 ++ 2 files changed, 4 insertions(+) diff --git a/access/src/main/java/org/springframework/security/web/access/expression/DefaultWebSecurityExpressionHandler.java b/access/src/main/java/org/springframework/security/web/access/expression/DefaultWebSecurityExpressionHandler.java index 09bfe1a8dac..4ff8dd3a1b9 100644 --- a/access/src/main/java/org/springframework/security/web/access/expression/DefaultWebSecurityExpressionHandler.java +++ b/access/src/main/java/org/springframework/security/web/access/expression/DefaultWebSecurityExpressionHandler.java @@ -32,7 +32,9 @@ * @author Eddú Meléndez * @author Steve Riesenberg * @since 3.0 + * @deprecated in favor of {@link DefaultHttpSecurityExpressionHandler} */ +@Deprecated(since = "7.0.0") public class DefaultWebSecurityExpressionHandler extends AbstractSecurityExpressionHandler implements SecurityExpressionHandler { diff --git a/web/src/main/java/org/springframework/security/web/access/expression/FilterInvocationExpressionRoot.java b/web/src/main/java/org/springframework/security/web/access/expression/FilterInvocationExpressionRoot.java index 50add0b0552..85fa143b85b 100644 --- a/web/src/main/java/org/springframework/security/web/access/expression/FilterInvocationExpressionRoot.java +++ b/web/src/main/java/org/springframework/security/web/access/expression/FilterInvocationExpressionRoot.java @@ -28,7 +28,9 @@ /** * @author Steve Riesenberg * @since 7.0 + * @deprecated in favor of {@link WebSecurityExpressionRoot} */ +@Deprecated(since = "7.0.0") final class FilterInvocationExpressionRoot extends SecurityExpressionRoot { /**