Allow all HttpSecurity DSL methods to apply Customizer.withDefaults() by default

Expected Behavior

Developers should be able to enable default security configurations using a fluent, no-argument DSL in the SecurityFilterChain lambda DSL.

http
  .csrf()
  .formLogin()
  .httpBasic()
  .logout();

Current Behavior

http
  .csrf(Customizer.withDefaults())
  .formLogin(Customizer.withDefaults())
  .httpBasic(Customizer.withDefaults())
  .logout(Customizer.withDefaults());

I see that there are methods already reserved with no-argument which are needed for configuration without using lambdas . That said, there’s room to make it work without withDefaults(). As a big project there are
definitely various aspect to things and I’d love to hear more about this and the possibility of making this change.

Start by locating the HttpSecurity DSL methods named in the issue and reviewing their existing no-argument overloads and Customizer.withDefaults() variants. Compare the expected fluent calls with the current calls, then determine whether all four methods can support the requested behavior without disrupting existing configuration APIs; done means the no-argument examples work consistently.