Andy Wilkinson 154a77cae9 Make reactive resource server back off with custom security ...

Previously, the auto-configuration of reactive OAuth 2 resource
server based web security did not back off when a custom
SecurityWebFilterChain was defined. This did not match the
equivalent servlet-based auto-configuration which backs off when
a custom SecurityFilterChain is defined.

This commit updates the reactive auto-configuration to behave in
the same way as the servlet auto-configuration. A new annotation,
@ConditionalOnDefaultReactiveWebSecurity, is introduced. The
existing servlet-specific annotation,
@ConditionalOnDefaultWebSecurity is deprecated and a replacement
named @ConditionalOnDefaultServletWebSecurity is introduced.

Fixes gh-50778

2026-09-04 16:08:58 +01:00

..

main

Make reactive resource server back off with custom security

2026-09-04 16:08:58 +01:00

test/java/org/springframework/boot/security

Make reactive resource server back off with custom security

2026-09-04 16:08:58 +01:00