Deprecated API

Contents

• Terminally Deprecated
• Classes
• Methods
• Constructors

Terminally Deprecated Elements

Element	Description
com.vaadin.flow.spring.security.RequestUtil.antMatchers(String...)	AntPathRequestMatcher is deprecated and marked for removal. This method is deprecated without direct replacement; use PathPatternRequestMatcher instead.
com.vaadin.flow.spring.security.RequestUtil.routeMatchers(String...)	AntPathRequestMatcher is deprecated and marked for removal. This method is deprecated without direct replacement; use PathPatternRequestMatcher instead.
com.vaadin.flow.spring.security.stateless.VaadinStatelessSecurityConfigurer.apply(HttpSecurity, Customizer<VaadinStatelessSecurityConfigurer<HttpSecurity>>)	use http.with(new VaadinStatelessSecurityConfigurer(), customizer) instead.
com.vaadin.flow.spring.security.stateless.VaadinStatelessSecurityConfigurer.setSharedObjects(HttpSecurity)	to be removed. There is no direct replacement for this method. Shared object setup must be done along with other required configurations by calling VaadinStatelessSecurityConfigurer.apply(HttpSecurity, Customizer).
com.vaadin.flow.spring.security.VaadinWebSecurity	Use VaadinSecurityConfigurer instead. It follows the Spring's SecurityConfigurer pattern and we recommend use it to configure Spring Security with Vaadin: @Configuration @EnableWebSecurity @Import(VaadinAwareSecurityContextHolderStrategyConfiguration.class) public class SecurityConfig { @Bean SecurityFilterChain securityFilterChain(HttpSecurity http) throws Exception { return http.with(VaadinSecurityConfigurer.vaadin(), configurer -> {}).build(); } } Read more details in Security Configurer documentation.
com.vaadin.flow.spring.security.VaadinWebSecurity.antMatchers(String...)	AntPathRequestMatcher is deprecated and will be removed, use VaadinWebSecurity.pathMatchers(String...) instead.
com.vaadin.flow.spring.security.VaadinWebSecurity.getViewAccessChecker()	ViewAccessChecker is not used anymore by VaadinWebSecurity, and has been replaced by NavigationAccessControl. Calling this method will get a stub implementation that delegates to the NavigationAccessControl instance.
com.vaadin.flow.spring.security.VaadinWebSecurity.routeMatchers(String...)	AntPathRequestMatcher is deprecated and will be removed, use VaadinWebSecurity.routePathMatchers(String...) instead.
com.vaadin.flow.spring.security.ViewAccessCheckerInitializer	ViewAccessChecker has been replaced by NavigationAccessControl.
com.vaadin.flow.spring.SpringVaadinSession	No replacement planned
com.vaadin.flow.spring.SpringViewAccessChecker	ViewAccessChecker has been replaced by NavigationAccessControl.
com.vaadin.flow.spring.VaadinConfigurationProperties.getBlacklistedPackages()	use VaadinConfigurationProperties.getBlockedPackages()
com.vaadin.flow.spring.VaadinConfigurationProperties.getWhitelistedPackages()	use VaadinConfigurationProperties.getAllowedPackages()
com.vaadin.flow.spring.VaadinConfigurationProperties.setBlacklistedPackages(List<String>)	use VaadinConfigurationProperties.setBlockedPackages(List)
com.vaadin.flow.spring.VaadinConfigurationProperties.setWhitelistedPackages(List<String>)	use VaadinConfigurationProperties.setAllowedPackages(List)
com.vaadin.flow.spring.VaadinServletConfiguration.RootExcludeHandler(List<String>, Controller)
com.vaadin.flow.spring.VaadinServletConfiguration.vaadinRootMapping(Environment)	use VaadinServletConfiguration.vaadinRootMapping(Environment, HandlerMapping) instead.

Deprecated Classes

Class	Description
com.vaadin.flow.spring.security.VaadinWebSecurity	Use VaadinSecurityConfigurer instead. It follows the Spring's SecurityConfigurer pattern and we recommend use it to configure Spring Security with Vaadin: @Configuration @EnableWebSecurity @Import(VaadinAwareSecurityContextHolderStrategyConfiguration.class) public class SecurityConfig { @Bean SecurityFilterChain securityFilterChain(HttpSecurity http) throws Exception { return http.with(VaadinSecurityConfigurer.vaadin(), configurer -> {}).build(); } } Read more details in Security Configurer documentation.
com.vaadin.flow.spring.security.ViewAccessCheckerInitializer	ViewAccessChecker has been replaced by NavigationAccessControl.
com.vaadin.flow.spring.SpringVaadinSession	No replacement planned
com.vaadin.flow.spring.SpringViewAccessChecker	ViewAccessChecker has been replaced by NavigationAccessControl.

Deprecated Methods

Method	Description
com.vaadin.flow.spring.security.RequestUtil.antMatchers(String...)	AntPathRequestMatcher is deprecated and marked for removal. This method is deprecated without direct replacement; use PathPatternRequestMatcher instead.
com.vaadin.flow.spring.security.RequestUtil.routeMatchers(String...)	AntPathRequestMatcher is deprecated and marked for removal. This method is deprecated without direct replacement; use PathPatternRequestMatcher instead.
com.vaadin.flow.spring.security.stateless.VaadinStatelessSecurityConfigurer.apply(HttpSecurity, Customizer<VaadinStatelessSecurityConfigurer<HttpSecurity>>)	use http.with(new VaadinStatelessSecurityConfigurer(), customizer) instead.
com.vaadin.flow.spring.security.stateless.VaadinStatelessSecurityConfigurer.setSharedObjects(HttpSecurity)	to be removed. There is no direct replacement for this method. Shared object setup must be done along with other required configurations by calling VaadinStatelessSecurityConfigurer.apply(HttpSecurity, Customizer).
com.vaadin.flow.spring.security.VaadinWebSecurity.antMatchers(String...)	AntPathRequestMatcher is deprecated and will be removed, use VaadinWebSecurity.pathMatchers(String...) instead.
com.vaadin.flow.spring.security.VaadinWebSecurity.getViewAccessChecker()	ViewAccessChecker is not used anymore by VaadinWebSecurity, and has been replaced by NavigationAccessControl. Calling this method will get a stub implementation that delegates to the NavigationAccessControl instance.
com.vaadin.flow.spring.security.VaadinWebSecurity.routeMatchers(String...)	AntPathRequestMatcher is deprecated and will be removed, use VaadinWebSecurity.routePathMatchers(String...) instead.
com.vaadin.flow.spring.VaadinConfigurationProperties.getBlacklistedPackages()	use VaadinConfigurationProperties.getBlockedPackages()
com.vaadin.flow.spring.VaadinConfigurationProperties.getWhitelistedPackages()	use VaadinConfigurationProperties.getAllowedPackages()
com.vaadin.flow.spring.VaadinConfigurationProperties.setBlacklistedPackages(List<String>)	use VaadinConfigurationProperties.setBlockedPackages(List)
com.vaadin.flow.spring.VaadinConfigurationProperties.setWhitelistedPackages(List<String>)	use VaadinConfigurationProperties.setAllowedPackages(List)
com.vaadin.flow.spring.VaadinServletConfiguration.vaadinRootMapping(Environment)	use VaadinServletConfiguration.vaadinRootMapping(Environment, HandlerMapping) instead.

Deprecated Constructors

Constructor	Description
com.vaadin.flow.spring.VaadinServletConfiguration.RootExcludeHandler(List<String>, Controller)