Skip to content

Deprecate Authorization Logic that uses FilterInvocation #17781

New issue
New issue
Open
#17884
Open
Deprecate Authorization Logic that uses FilterInvocation#17781
#17884
Assignees
therepanic
Labels
in: webAn issue in web modules (web, webmvc)type: enhancementA general enhancement
Milestone
7.0.x
@rwinch

Description

@rwinch
rwinch
opened on Aug 20, 2025

We should deprecate authorization logic that uses FilterInvocation in favor of using RequestAuthorizationContext. A few examples:

  • SecurityExpressionHandler<FilterInvocation> in favor of SecurityExpressionHandler<RequestAuthorizationContext>
  • FilterInvocationExpressionRoot (might change to HttpServletRequestExpressionRoot) in favor of WebSecurityExpressionRoot
  • DefaultWebSecurityExpressionHandler in favor of DefaultHttpSecurityExpressionHandler

Related gh-17673

Metadata

Metadata

Assignees

Labels

in: webAn issue in web modules (web, webmvc)type: enhancementA general enhancement

Type

No type

Projects

No projects

Milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions