Deprecated API

Contents

• Terminally Deprecated
• Classes
• Methods

Terminally Deprecated Elements

Element	Description
com.vaadin.flow.spring.security.RequestUtil.antMatchers(String...)	AntPathRequestMatcher is deprecated and marked for removal. This method is deprecated without direct replacement; use PathPatternRequestMatcher instead.
com.vaadin.flow.spring.security.RequestUtil.isAllowedHillaView(HttpServletRequest)	use RequestUtil.isAnonymousHillaRoute(HttpServletRequest) to match requests to Hilla views that do not require authentication
com.vaadin.flow.spring.security.RequestUtil.routeMatchers(String...)	AntPathRequestMatcher is deprecated and marked for removal. This method is deprecated without direct replacement; use PathPatternRequestMatcher instead.
com.vaadin.flow.spring.security.stateless.VaadinStatelessSecurityConfigurer.apply(HttpSecurity, Customizer<VaadinStatelessSecurityConfigurer<HttpSecurity>>)	use http.with(new VaadinStatelessSecurityConfigurer(), customizer) instead.
com.vaadin.flow.spring.security.VaadinAwareSecurityContextHolderStrategyConfiguration	A SecurityContextHolderStrategy implementation is now automatically provided by SpringSecurityAutoConfiguration and it is no more necessary to import this configuration class, which is now no-op. The default strategy implementation is VaadinAwareSecurityContextHolderStrategy and can be overridden by providing a custom bean.

Deprecated Classes

Class	Description
com.vaadin.flow.spring.security.VaadinAwareSecurityContextHolderStrategyConfiguration	A SecurityContextHolderStrategy implementation is now automatically provided by SpringSecurityAutoConfiguration and it is no more necessary to import this configuration class, which is now no-op. The default strategy implementation is VaadinAwareSecurityContextHolderStrategy and can be overridden by providing a custom bean.

Deprecated Methods

Method	Description
com.vaadin.flow.spring.security.RequestUtil.antMatchers(String...)	AntPathRequestMatcher is deprecated and marked for removal. This method is deprecated without direct replacement; use PathPatternRequestMatcher instead.
com.vaadin.flow.spring.security.RequestUtil.isAllowedHillaView(HttpServletRequest)	use RequestUtil.isAnonymousHillaRoute(HttpServletRequest) to match requests to Hilla views that do not require authentication
com.vaadin.flow.spring.security.RequestUtil.routeMatchers(String...)	AntPathRequestMatcher is deprecated and marked for removal. This method is deprecated without direct replacement; use PathPatternRequestMatcher instead.
com.vaadin.flow.spring.security.stateless.VaadinStatelessSecurityConfigurer.apply(HttpSecurity, Customizer<VaadinStatelessSecurityConfigurer<HttpSecurity>>)	use http.with(new VaadinStatelessSecurityConfigurer(), customizer) instead.