spring-projects / spring-projects/spring-security
Deprecate AuthenticationProvider
Open
@jzheaux is already working on this.
Since Jun 21, 2022.
in: core
type: enhancement
- Dominant language
- Java
- Stars
- 9.6k
- Forks
- 6.3k
- Avg merge
- 2d 11h
- Merged PRs (30d)
- 52
Description
AuthenticationManager and AuthenticationProvider have the same primary signature. In an effort to simplify the API, AuthenticationProvider should be deprecated.
Here is an initial list:
- Have existing
AuthenticationProviders implementAuthorizationManager - Add
DelegatingAuthenticationManagerto replaceProviderManager - Introduce DSL support for specifying
AuthenticationManagerfor each authentication mechanism - Use
AuthenticationManagerby default for each authentication mechanism - Deprecate
authentication-providerXML support - Deprecate DSL support for
authenticationProvider() - Consider creating
AuthenticationProviderManagerAdapterto adaptAuthenticationProviders intoAuthenticationManagers - Consider
@Beansupport for multipleAuthenticationManagers
Contributor guide
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Assessment
This issue has not been assessed yet.