Andy Wilkinson 154a77cae9 Make reactive resource server back off with custom security ...

Previously, the auto-configuration of reactive OAuth 2 resource
server based web security did not back off when a custom
SecurityWebFilterChain was defined. This did not match the
equivalent servlet-based auto-configuration which backs off when
a custom SecurityFilterChain is defined.

This commit updates the reactive auto-configuration to behave in
the same way as the servlet auto-configuration. A new annotation,
@ConditionalOnDefaultReactiveWebSecurity, is introduced. The
existing servlet-specific annotation,
@ConditionalOnDefaultWebSecurity is deprecated and a replacement
named @ConditionalOnDefaultServletWebSecurity is introduced.

Fixes gh-50778

2026-09-04 16:08:58 +01:00

..

src

Make reactive resource server back off with custom security

2026-09-04 16:08:58 +01:00

build.gradle

Merge branch '3.5.x' into 4.0.x

2026-05-14 15:02:24 +01:00