Spring Security po nowemu!

@Configuration
@EnableWebSecurity
public class SecurityConfig  /** Do usunięcia: extends WebSecurityConfigurerAdapter */ {

    private CustomAuthSuccessHandler authSuccessHandler;
    private CustomAuthFailureHandler authFailureHandler;
    private CustomLogoutSuccessHandler logoutSuccessHandler;
    private CustomAuthEntryPoint authEntryPoint;

    public SecurityConfig(CustomAuthSuccessHandler authSuccessHandler,
                                CustomAuthFailureHandler authFailureHandler,
                                    CustomLogoutSuccessHandler logoutSuccessHandler,
                                        CustomAuthEntryPoint authEntryPoint...) {
        this.authSuccessHandler = authSuccessHandler;
        this.authFailureHandler = authFailureHandler;
        this.logoutSuccessHandler = logoutSuccessHandler;
        this.authEntryPoint = authEntryPoint;
        ...
    }

//  Do usunięcia:
//
//  @Override
//  protected void configure(HttpSecurity http) throws Exception {
//
//      http.cors().configurationSource(corsConfigurationSource())...
//  }

    @Bean
    protected SecurityFilterChain configure(HttpSecurity http) throws Exception {

        http.cors().configurationSource(corsConfigurationSource())...

        return http.build();
    }

//  Do usunięcia:
//
//  @Autowired
//  public void configAuthentication(AuthenticationManagerBuilder auth) throws Exception {
//      auth.jdbcAuthentication().dataSource(dataSource).passwordEncoder(passwordEncoder())
//				.usersByUsernameQuery("select email, password...")
//				.authoritiesByUsernameQuery(
//						"select u.email, r.role_name from users_roles...");
//  }

    @Bean
    public AuthenticationManager authManager(HttpSecurity http) throws Exception {
        return http.getSharedObject(AuthenticationManagerBuilder.class)
                .jdbcAuthentication()
                .dataSource(dataSource)
                .usersByUsernameQuery("select email, password...")
                .authoritiesByUsernameQuery("select u.email, r.role_name from users_roles...")
                .passwordEncoder(passwordEncoder()).and().build();
    }

    public PasswordEncoder passwordEncoder() {
        ...
    }

    private CorsConfigurationSource corsConfigurationSource() {
        ...
    }

    private Filter csrfHeaderFilter() {
        ...
    }

    private CsrfTokenRepository csrfTokenRepository() {
        ...
    }
}

@Service("userDetailsService")
public class CustomUserDetailsService implements UserDetailsService {

    @Override
    public UserDetails loadUserByUsername(final String email) throws UsernameNotFoundException {

        try {
            final User user = userRepository.findByEmail(email);

            ...

            return MyUserDetails.build(user);
        } catch (final Exception e) {
            throw new RuntimeException(e);
        }
    }
}

public class CustomAuthenticationProvider extends DaoAuthenticationProvider {

    private UserRepository userRepository;

    @Override
    public Authentication authenticate(Authentication auth) {
        final User user = userRepository.findByEmail(auth.getName());

        ...

        return new UsernamePasswordAuthenticationToken(user,
                                    result.getCredentials(), result.getAuthorities());
    }

    @Override
    public boolean supports(Class authentication) {
        return authentication.equals(UsernamePasswordAuthenticationToken.class);
    }
}

protected void configure(final AuthenticationManagerBuilder auth) {
    auth.authenticationProvider(authProvider());
}

public DaoAuthenticationProvider authProvider() {
    final CustomAuthenticationProvider authProvider = new CustomAuthenticationProvider();
    authProvider.setUserDetailsService(userDetailsService);
    authProvider.setPasswordEncoder(passwordEncoder());
    return authProvider;
}

@Bean
public AuthenticationManager authManager(HttpSecurity http) throws Exception {
    final CustomAuthenticationProvider authProvider = new CustomAuthenticationProvider();
    authProvider.setUserDetailsService(userDetailsService);
    authProvider.setPasswordEncoder(passwordEncoder());
    return http.getSharedObject(AuthenticationManagerBuilder.class)
                .authenticationProvider(authProvider).build();
}

@Configuration
@EnableWebSecurity
public class SecurityConfig {

    private CustomAuthSuccessHandler authSuccessHandler;
    private CustomAuthFailureHandler authFailureHandler;
    private CustomLogoutSuccessHandler logoutSuccessHandler;
    private CustomAuthEntryPoint authEntryPoint;
    private final UserDetailsService userDetailsService;

    public SecurityConfig(CustomAuthSuccessHandler authSuccessHandler,
                                CustomAuthFailureHandler authFailureHandler,
                                    CustomLogoutSuccessHandler logoutSuccessHandler,
                                        UserDetailsService userDetailsService) {
        this.authSuccessHandler = authSuccessHandler;
        this.authFailureHandler = authFailureHandler;
        this.logoutSuccessHandler = logoutSuccessHandler;
        this.userDetailsService = userDetailsService;
        ...
    }

    ...

    @Bean
    public AuthenticationManager authManager(HttpSecurity http) throws Exception {
        final CustomAuthenticationProvider authProvider = new CustomAuthenticationProvider();
        authProvider.setUserDetailsService(userDetailsService);
        authProvider.setPasswordEncoder(passwordEncoder());
        return http.getSharedObject(AuthenticationManagerBuilder.class)
                    .authenticationProvider(authProvider).build();
    }

    @Bean
    public WebSecurityCustomizer webSecurityCustomizer() {
        return (web) -> web.ignoring().antMatchers("/resources/**");
    }
}