[NIFI-9796] Update Registry Spring Security Configuration to Avoid Warnings

• Type: Improvement
• Status: Resolved
• Priority: Minor
• Resolution: Fixed
• Fix Version/s: 1.16.0
• Component/s: NiFi Registry
• Assignee: David Handermann
• Reporter: David Handermann
• Created: 14/Mar/22 19:07
• Updated: 14/Mar/22 19:53
• Resolved: 14/Mar/22 19:53

Description

NiFi Registry relies on Spring Security to implement authentication and authorization. Recent versions of Spring Security added a warning message indicating a deprecated use of pattern-based path configuration.  The NiFi Registry Spring Security configuration should be updated to avoid the following warning:

WARN [main] o.s.s.c.a.web.builders.WebSecurity You are asking Spring Security to ignore Ant [pattern='/access/token/identity-provider']. This is not recommended -- please use permitAll via HttpSecurity#authorizeHttpRequests instead. 

Issue Links

• links to: GitHub Pull Request #5866