Skip to content

Conversation

@mcollovati
Copy link
Contributor

The default rule for anyRequest() changed from authenticated() to denyAll() in Vaadin 25. Update the documentation to reflect this behavior change.

Fixes #5048

The default rule for anyRequest() changed from authenticated() to
denyAll() in Vaadin 25. Update the documentation to reflect this
behavior change.

Fixes #5048
@mcollovati mcollovati added the flow label Jan 7, 2026
@mshabarov mshabarov requested a review from caalador January 12, 2026 12:35
@caalador caalador merged commit b656fea into main Jan 12, 2026
3 checks passed
@caalador caalador deleted the issues/5048-vaadinsecurityconfigurer_anyrequest_default branch January 12, 2026 13:31
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Wrong default for VaadinSecurityConfigurer.anyRequest

3 participants