diff --git a/config/src/main/java/org/springframework/security/config/annotation/web/builders/WebSecurityFilterChainValidator.java b/config/src/main/java/org/springframework/security/config/annotation/web/builders/WebSecurityFilterChainValidator.java index fa97043fb6..6f6a9bef78 100644 --- a/config/src/main/java/org/springframework/security/config/annotation/web/builders/WebSecurityFilterChainValidator.java +++ b/config/src/main/java/org/springframework/security/config/annotation/web/builders/WebSecurityFilterChainValidator.java @@ -103,11 +103,15 @@ private void checkAuthorizationFilters(List chains) { } if (authorizationFilter != null && filterSecurityInterceptor != null) { this.logger.warn( - "It is not recommended to use authorizeRequests or FilterSecurityInterceptor in the configuration. Please only use authorizeHttpRequests"); + "It is not recommended to use authorizeRequests or FilterSecurityInterceptor in the configuration. " + + "Please only use authorizeHttpRequests. " + + "For XML configuration, please add use-authorization-manager=\"true\" to your element."); } if (filterSecurityInterceptor != null) { this.logger.warn( - "Usage of authorizeRequests and FilterSecurityInterceptor are deprecated. Please use authorizeHttpRequests in the configuration"); + "Usage of authorizeRequests and FilterSecurityInterceptor are deprecated. " + + "Please use authorizeHttpRequests in the configuration. " + + "For XML configuration, please add use-authorization-manager=\"true\" to your element."); } authorizationFilter = null; filterSecurityInterceptor = null; diff --git a/config/src/main/java/org/springframework/security/config/http/DefaultFilterChainValidator.java b/config/src/main/java/org/springframework/security/config/http/DefaultFilterChainValidator.java index fb88f14b3a..b568d5d98e 100644 --- a/config/src/main/java/org/springframework/security/config/http/DefaultFilterChainValidator.java +++ b/config/src/main/java/org/springframework/security/config/http/DefaultFilterChainValidator.java @@ -130,11 +130,15 @@ private void checkAuthorizationFilters(List chains) { } if (authorizationFilter != null && filterSecurityInterceptor != null) { this.logger.warn( - "It is not recommended to use authorizeRequests or FilterSecurityInterceptor in the configuration. Please only use authorizeHttpRequests"); + "It is not recommended to use authorizeRequests or FilterSecurityInterceptor in the configuration. " + + "Please only use authorizeHttpRequests. " + + "For XML configuration, please add use-authorization-manager=\"true\" to your element."); } if (filterSecurityInterceptor != null) { this.logger.warn( - "Usage of authorizeRequests and FilterSecurityInterceptor are deprecated. Please use authorizeHttpRequests in the configuration"); + "Usage of authorizeRequests and FilterSecurityInterceptor are deprecated. " + + "Please use authorizeHttpRequests in the configuration. " + + "For XML configuration, please add use-authorization-manager=\"true\" to your element."); } authorizationFilter = null; filterSecurityInterceptor = null;