You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
first of all: Thanks for your effort and your amazing work!
I recently read through the JavaDoc of BasicAuthenticationFilter and was a bit irritated by lines 84 to 86 where Digest Auth was described as a better alternative for Basic Auth which is certainly a deprecated artifact and conflicts with the warning stated on the official tutorial.
It's not a big deal for readers with basic security knowledge... but maybe unsophisticated project setups can be prevented if deprecated hints like this are removed.
Hi Spring Security Team,
first of all: Thanks for your effort and your amazing work!
I recently read through the JavaDoc of
BasicAuthenticationFilter
and was a bit irritated by lines 84 to 86 whereDigest Auth
was described as a better alternative forBasic Auth
which is certainly a deprecated artifact and conflicts with the warning stated on the official tutorial.It's not a big deal for readers with basic security knowledge... but maybe unsophisticated project setups can be prevented if deprecated hints like this are removed.
spring-security/web/src/main/java/org/springframework/security/web/authentication/www/BasicAuthenticationFilter.java
Lines 84 to 86 in 9ec3e80
The text was updated successfully, but these errors were encountered: