diff --git a/config/src/main/java/org/springframework/security/config/annotation/web/builders/WebSecurityFilterChainValidator.java b/config/src/main/java/org/springframework/security/config/annotation/web/builders/WebSecurityFilterChainValidator.java index b0bf43fb3b7..9faadf00200 100644 --- a/config/src/main/java/org/springframework/security/config/annotation/web/builders/WebSecurityFilterChainValidator.java +++ b/config/src/main/java/org/springframework/security/config/annotation/web/builders/WebSecurityFilterChainValidator.java @@ -103,7 +103,8 @@ private void checkAuthorizationFilters(List chains) { } if (filterSecurityInterceptor != null) { this.logger.warn( - "Usage of authorizeRequests is deprecated. Please use authorizeHttpRequests in the configuration"); + "Usage of authorizeRequests is deprecated. Please use authorizeHttpRequests in the configuration. " + + "If using XML, ensure use-authorization-manager=\"true\" is configured"); } authorizationFilter = null; filterSecurityInterceptor = null; diff --git a/config/src/main/java/org/springframework/security/config/http/DefaultFilterChainValidator.java b/config/src/main/java/org/springframework/security/config/http/DefaultFilterChainValidator.java index 8f2baeb4c68..0b85375f132 100644 --- a/config/src/main/java/org/springframework/security/config/http/DefaultFilterChainValidator.java +++ b/config/src/main/java/org/springframework/security/config/http/DefaultFilterChainValidator.java @@ -126,7 +126,8 @@ private void checkAuthorizationFilters(List chains) { } if (filterSecurityInterceptor != null) { this.logger.warn( - "Usage of authorizeRequests is deprecated. Please use authorizeHttpRequests in the configuration"); + "Usage of authorizeRequests is deprecated. Please use authorizeHttpRequests in the configuration. " + + "If using XML, ensure use-authorization-manager=\"true\" is configured"); } authorizationFilter = null; filterSecurityInterceptor = null;