For the default CAE:

With the update to Spring Boot 2.7 and Spring Security 5.8, the org.springframework.security.config.annotation.web.configuration.WebSecurityConfigurerAdapter is now deprecated. Hence, the com.coremedia.cae.security.CaeWebSecurityConfigurerAdapter has been migrated regarding to the Spring Boot 2.7 migration documentation. The migrated configuration is now done in the com.coremedia.cae.security.CaeWebSecurityAutoConfiguration. It now creates the AuthenticationManager, the SecurityFilterChain and further configuration beans that are required by them. To allow HTTP web security customizations, a new class com.coremedia.cae.security.CaeHttpSecurityConfigurer has been added. It is provided as a bean that can be replaced with a custom implementation and provides the the HTTP web security related configure methods that were formally provided by the com.coremedia.cae.security.CaeWebSecurityConfigurerAdapter. To migrate customizations to the new configuration, move the HTTP web security related configure methods from the custom com.coremedia.cae.security.CaeWebSecurityConfigurerAdapter implementation to a new com.coremedia.cae.security.CaeHttpSecurityConfigurer implementation and provide it as a bean that replaces the com.coremedia.cae.security.CaeWebSecurityAutoConfiguration.caeHttpSecurityConfigurer bean.

For the CAE with Elastic Social extension:

With the update to Spring Boot 2.7 and Spring Security 5.8, the org.springframework.security.config.annotation.web.configuration.WebSecurityConfigurerAdapter is now deprecated. Hence, the com.coremedia.elastic.social.springsecurity.SocialWebSecurityConfigurerAdapter has been migrated regarding to the Spring Boot 2.7 migration documentation. The migrated configuration is now done in the com.coremedia.elastic.social.springsecurity.SocialWebSecurityAutoConfiguration. It now creates the AuthenticationManager, the SecurityFilterChain and further configuration beans that are required by them. To allow HTTP web security customizations, a new class com.coremedia.elastic.social.springsecurity.SocialHttpSecurityConfigurer has been added. It is provided as a bean that can be replaced with a custom implementation and provides the the HTTP web security related configure methods that were formally provided by the com.coremedia.elastic.social.springsecurity.SocialWebSecurityConfigurerAdapter. To migrate customizations to the new configuration, move the HTTP web security related configure methods from the custom com.coremedia.elastic.social.springsecurity.SocialWebSecurityConfigurerAdapter implementation to a new com.coremedia.elastic.social.springsecurity.SocialHttpSecurityConfigurer implementation and provide it as a bean that replaces the com.coremedia.elastic.social.springsecurity.SocialWebSecurityAutoConfiguration.caeHttpSecurityConfigurer bean.

For further information see the provided migration guidelines and documentation:

(CMS-22461)