Skip to content

Deprecated hint on BasicAuthenticationFilter #13231

Closed
@mczul

Description

@mczul

Hi Spring Security Team,

first of all: Thanks for your effort and your amazing work!

I recently read through the JavaDoc of BasicAuthenticationFilter and was a bit irritated by lines 84 to 86 where Digest Auth was described as a better alternative for Basic Auth which is certainly a deprecated artifact and conflicts with the warning stated on the official tutorial.

It's not a big deal for readers with basic security knowledge... but maybe unsophisticated project setups can be prevented if deprecated hints like this are removed.

* undesirable in many situations. Digest authentication is also provided by Spring
* Security and should be used instead of Basic authentication wherever possible. See
* {@link org.springframework.security.web.authentication.www.DigestAuthenticationFilter}.

Metadata

Metadata

Assignees

Labels

in: docsAn issue in Documentation or samplestype: bugA general bug

Type

No type

Projects

No projects

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions