Browse Source

Document SecurityContextRepository default

Closes gh-12049
Steve Riesenberg 2 years ago
parent
commit
63cf954e07
1 changed files with 7 additions and 0 deletions
  1. 7 0
      docs/modules/ROOT/pages/migration.adoc

+ 7 - 0
docs/modules/ROOT/pages/migration.adoc

@@ -30,6 +30,13 @@ If you are explicitly opting into Spring Security 6's new defaults, the followin
 
 include::partial$servlet/architecture/security-context-explicit.adoc[]
 
+=== Multiple SecurityContextRepository
+
+In Spring Security 5, the default xref:servlet/authentication/persistence.adoc#securitycontextrepository[`SecurityContextRepository`] was `HttpSessionSecurityContextRepository`.
+
+In Spring Security 6, the default `SecurityContextRepository` is `DelegatingSecurityContextRepository`.
+If you configured the `SecurityContextRepository` only for the purpose of updating to 6.0, you can remove it completely.
+
 [[requestcache-query-optimization]]
 === Optimize Querying of `RequestCache`