Open
Description
This issue is a major theme for next generation of Spring Security. Issues that relate to this will be added below.
- Consider introducing a new component model for authentication and authorization #13267
- Consider introducing a new authorization rules model #13277 (Related Consider Making Attribute Based Authorization Simpler to implement #13306)
- Consider redesigning the configuration model #13268
- Consider merging
AuthenticationManager
andAuthenticationProvider
#13270 - Consider removing XML configuration support #13271
- Consider removing underused modules and APIs #13272
- Consider enabling decentralized per-module security configuration #13295
- Consider adding common scenario/pattern based security configurations #13296