Update formLogin() sample

samples/form-login/samples-form-login.gradle

@@ -13,6 +13,7 @@ dependencies {
 	implementation "org.springframework.boot:spring-boot-starter-web"
 	implementation "org.springframework.boot:spring-boot-starter-security"
 	implementation 'org.springframework.boot:spring-boot-starter-thymeleaf'
+	implementation project(':spring-security-config-feature')
 
 	testImplementation "org.springframework.boot:spring-boot-starter-test"
 	testImplementation "org.springframework.security:spring-security-test"

samples/form-login/src/main/java/sample/FormLoginApplication.java

@@ -13,6 +13,7 @@
  * See the License for the specific language governing permissions and
  * limitations under the License.
  */
+
 package sample;
 
 import org.springframework.boot.SpringApplication;

samples/form-login/src/main/java/sample/config/FeatureConfiguration.java

@@ -0,0 +1,62 @@
+/*
+ * Copyright 2002-2023 the original author or authors.
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *      https://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+
+package sample.config;
+
+import java.util.Arrays;
+import java.util.List;
+
+import org.springframework.context.annotation.Bean;
+import org.springframework.context.annotation.Configuration;
+import org.springframework.security.config.annotation.web.builders.HttpSecurity;
+import org.springframework.security.config.feature.configure.AuthenticationFeatureConfigurer;
+import org.springframework.security.config.feature.configure.AuthorizationFeatureConfigurer;
+import org.springframework.security.config.feature.configure.Configurable;
+import org.springframework.security.config.feature.configure.FeatureConfigurationContext;
+import org.springframework.security.config.feature.configure.FeatureConfigurer;
+import org.springframework.security.config.feature.model.Feature;
+import org.springframework.security.config.feature.model.SecurityProfile;
+import org.springframework.security.web.SecurityFilterChain;
+
+@Configuration
+public class FeatureConfiguration {
+
+	@Bean
+	public List<FeatureConfigurer> featureConfigurers() {
+		return Arrays.asList(
+				new AuthenticationFeatureConfigurer(),
+				new AuthorizationFeatureConfigurer());
+	}
+
+	@Bean
+	public SecurityFilterChain securityFilterChain(SecurityProfile securityProfile, List<FeatureConfigurer> featureConfigurers,
+			HttpSecurity httpSecurity) throws Exception {
+
+		Configurable<HttpSecurity> configurable = () -> httpSecurity;
+
+		for (Feature feature : securityProfile.getFeatures()) {
+			for (FeatureConfigurer featureConfigurer : featureConfigurers) {
+				featureConfigurer.configure(new FeatureConfigurationContextImpl(feature, configurable));
+			}
+		}
+
+		return httpSecurity.build();
+	}
+
+	private record FeatureConfigurationContextImpl(Feature feature, Configurable<?> configurable) implements FeatureConfigurationContext {
+	}
+
+}

samples/form-login/src/main/java/sample/config/SecurityConfig.java

@@ -16,34 +16,38 @@
 
 package sample.config;
 
+import java.util.List;
+
 import org.springframework.context.annotation.Bean;
 import org.springframework.context.annotation.Configuration;
-import org.springframework.security.config.annotation.web.builders.HttpSecurity;
+import org.springframework.context.annotation.Import;
 import org.springframework.security.config.annotation.web.configuration.EnableWebSecurity;
+import org.springframework.security.config.feature.dsl.DefaultSecurityProfileDsl;
+import org.springframework.security.config.feature.model.SecurityProfile;
 import org.springframework.security.core.userdetails.User;
 import org.springframework.security.core.userdetails.UserDetails;
 import org.springframework.security.core.userdetails.UserDetailsService;
 import org.springframework.security.provisioning.InMemoryUserDetailsManager;
-import org.springframework.security.web.SecurityFilterChain;
 
+@Import(FeatureConfiguration.class)
 @Configuration
 @EnableWebSecurity
 public class SecurityConfig {
 
 	// @formatter:off
 	@Bean
-	public SecurityFilterChain securityFilterChain(HttpSecurity http) throws Exception {
-		http
-				.authorizeHttpRequests((authorize) -> authorize
-						.requestMatchers("/assets/**", "/login", "/login-error").permitAll()
-						.anyRequest().authenticated()
-				)
-				.formLogin((formLogin) -> formLogin
-						.loginPage("/login")
-						.defaultSuccessUrl("/index", true)
-						.failureUrl("/login-error")
-				);
-		return http.build();
+	public SecurityProfile securityProfile() {
+		return new DefaultSecurityProfileDsl()
+			.formAuthentication((configurationOptions) -> {
+				configurationOptions.setLoginPage("/login");
+				configurationOptions.setDefaultSuccessUrl("/index");
+				configurationOptions.setDefaultSuccessUrlAlwaysUse(true);
+				configurationOptions.setFailureUrl("/login-error");
+			})
+			.urlAuthorization((configurationOptions) -> {
+				configurationOptions.setAllowed(List.of("/assets/**", "/login", "/login-error"));
+			})
+			.build();
 	}
 	// @formatter:on
 

samples/form-login/src/main/java/sample/web/DefaultController.java

@@ -13,6 +13,7 @@
  * See the License for the specific language governing permissions and
  * limitations under the License.
  */
+
 package sample.web;
 
 import org.springframework.stereotype.Controller;

samples/form-login/src/main/java/sample/web/LoginController.java

@@ -13,6 +13,7 @@
  * See the License for the specific language governing permissions and
  * limitations under the License.
  */
+
 package sample.web;
 
 import org.springframework.stereotype.Controller;