Spring Boot 2.0 disable default security

Question

I want to use Spring Security for JWT authentication. But it comes with default authentication. I am trying to disable it, but the old approach of doing this - disabling it through application.properties - is deprecated in 2.0.

This is what I tried:

@Configuration public class StackWebSecurityConfigurerAdapter extends WebSecurityConfigurerAdapter {      @Override     protected void configure(HttpSecurity http) throws Exception {         http.httpBasic().disable();         // http.authorizeRequests().anyRequest().permitAll(); // Also doesn't work.     } } 

How can I simply disable basic security?

UPDATE
It might be nice to know that I am not using web mvc but web flux.

Screenshot:

Answer 1

According to the new updates in Spring 2.0, if Spring Security is on the classpath, Spring Boot will add @EnableWebSecurity.So adding entries to the application.properties ain't gonna work (i.e it is no longer customizable that way). For more information visit the official website Security changes in Spring Boot 2.0

Albeit not sure about your requirement exactly, I could think of one workaround like the following:-

@Configuration @EnableWebSecurity public class SecurityConfiguration  extends WebSecurityConfigurerAdapter{     @Override     protected void configure(HttpSecurity http) throws Exception{         http.authorizeRequests().antMatchers("/").permitAll();     } } 

Hope this helps.