Skip to content

AuthenticationServiceException propagation flag is unconfigurable in 5.8 #12132

@jzheaux

Description

@jzheaux

There is no way to configure the rethrowAuthenticationServiceException flag for ServerHttpSercurity#httpBasic or #oauth2ResourceServer.

This is problematic since it means that users upgrading to 5.8 will not have a clear way to opt-in to the 6.0 behavior nor opt-out after upgrading.

While adding methods is typically an enhancement, it makes sense to add it here since the original feature is otherwise incomplete without an ability to use it to prepare for the upgrade.

Metadata

Metadata

Assignees

Labels

in: configAn issue in spring-security-configtype: bugA general bug

Type

No type

Projects

No projects

Milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions