“WebSecurityConfigurerAdapter 已经过时了”解决方案

1. 前情提要

升级SpringSecurity至5.7.6后，提示WebSecurityConfigurerAdapter已经过时了

2. 修改前代码

3.解决方案

@AutoConfiguration
@EnableWebSecurity
@EnableGlobalMethodSecurity(prePostEnabled = true, securedEnabled = true)
public class MyWebSecurityConfigAdapter {
  @Resource
  private AuthenticationEntryPoint authenticationEntryPoint;
  @Resource
  private AccessDeniedHandler accessDeniedHandler;
  
  @Bean
  public AuthenticationManager authenticationManagerBean(AuthenticationConfiguration authenticationConfiguration) throws Exception {
    return authenticationConfiguration.getAuthenticationManager();
  }
  @Bean
  protected SecurityFilterChain configure(HttpSecurity httpSecurity) throws Exception {
    httpSecurity
        // 任何请求都不需要认证
        .authorizeRequests()
        .anyRequest()
        .permitAll()
        // 关闭跨站请求防护，不使用session
        .and()
        .csrf()
        .disable()
        .sessionManagement()
        .sessionCreationPolicy(SessionCreationPolicy.STATELESS)
        // 添加自定义权限拒绝处理
        .and()
        .exceptionHandling()
        .accessDeniedHandler(accessDeniedHandler)
        .authenticationEntryPoint(authenticationEntryPoint);
    return httpSecurity.build();
  }
}