Adjust log message to include guidance for XML users

philipp.delmonego · philipp.delmonego · commit 7cd4efb8c812 · 2025-06-20T12:13:56.000+02:00
Signed-off-by: philipp.delmonego &lt;philipp.delmonego@live.de&gt;
diff --git a/config/src/main/java/org/springframework/security/config/annotation/web/builders/WebSecurityFilterChainValidator.java b/config/src/main/java/org/springframework/security/config/annotation/web/builders/WebSecurityFilterChainValidator.java
@@ -103,7 +103,8 @@ private void checkAuthorizationFilters(List<SecurityFilterChain> chains) {
 			}
 			if (filterSecurityInterceptor != null) {
 				this.logger.warn(
-						"Usage of authorizeRequests is deprecated. Please use authorizeHttpRequests in the configuration");
+						"Usage of authorizeRequests is deprecated. Please use authorizeHttpRequests in the configuration. "
+								+ "If using XML, ensure use-authorization-manager=\"true\" is configured");
 			}
 			authorizationFilter = null;
 			filterSecurityInterceptor = null;
diff --git a/config/src/main/java/org/springframework/security/config/http/DefaultFilterChainValidator.java b/config/src/main/java/org/springframework/security/config/http/DefaultFilterChainValidator.java
@@ -126,7 +126,8 @@ private void checkAuthorizationFilters(List<SecurityFilterChain> chains) {
 			}
 			if (filterSecurityInterceptor != null) {
 				this.logger.warn(
-						"Usage of authorizeRequests is deprecated. Please use authorizeHttpRequests in the configuration");
+						"Usage of authorizeRequests is deprecated. Please use authorizeHttpRequests in the configuration. "
+								+ "If using XML, ensure use-authorization-manager=\"true\" is configured");
 			}
 			authorizationFilter = null;
 			filterSecurityInterceptor = null;

Original file line number	Diff line number	Diff line change
`@@ -103,7 +103,8 @@ private void checkAuthorizationFilters(List<SecurityFilterChain> chains) {`
`103`	`103`	`}`
`104`	`104`	`if (filterSecurityInterceptor != null) {`
`105`	`105`	`this.logger.warn(`
`106`		`- "Usage of authorizeRequests is deprecated. Please use authorizeHttpRequests in the configuration");`
	`106`	`+ "Usage of authorizeRequests is deprecated. Please use authorizeHttpRequests in the configuration. "`
	`107`	`+ + "If using XML, ensure use-authorization-manager=\"true\" is configured");`
`107`	`108`	`}`
`108`	`109`	`authorizationFilter = null;`
`109`	`110`	`filterSecurityInterceptor = null;`
Original file line number	Diff line number	Diff line change
`@@ -126,7 +126,8 @@ private void checkAuthorizationFilters(List<SecurityFilterChain> chains) {`
`126`	`126`	`}`
`127`	`127`	`if (filterSecurityInterceptor != null) {`
`128`	`128`	`this.logger.warn(`
`129`		`- "Usage of authorizeRequests is deprecated. Please use authorizeHttpRequests in the configuration");`
	`129`	`+ "Usage of authorizeRequests is deprecated. Please use authorizeHttpRequests in the configuration. "`
	`130`	`+ + "If using XML, ensure use-authorization-manager=\"true\" is configured");`
`130`	`131`	`}`
`131`	`132`	`authorizationFilter = null;`
`132`	`133`	`filterSecurityInterceptor = null;`