From 44d714984dc5bcf97f1dfb2f78ad47779458c82b Mon Sep 17 00:00:00 2001
From: Scott Frederick <sfrederick@pivotal.io>
Date: Tue, 31 Mar 2020 15:54:20 -0500
Subject: [PATCH] Back Spring Security version to 5.2.2 and use BOM

---
 build.gradle                     | 2 +-
 spring-credhub-core/build.gradle | 5 +++--
 2 files changed, 4 insertions(+), 3 deletions(-)

diff --git a/build.gradle b/build.gradle
index e148ae1..a949760 100644
--- a/build.gradle
+++ b/build.gradle
@@ -32,7 +32,7 @@ buildscript {
 ext {
 	springVersion = "5.2.5.RELEASE"
 	springBootVersion = "2.2.6.RELEASE"
-	springSecurityVersion = "5.3.0.RELEASE"
+	springSecurityVersion = "5.2.2.RELEASE"
 	reactorVersion = "Dysprosium-SR6"
 
 	okHttp3Version = "4.4.1"
diff --git a/spring-credhub-core/build.gradle b/spring-credhub-core/build.gradle
index 6718ab1..0774d1e 100644
--- a/spring-credhub-core/build.gradle
+++ b/spring-credhub-core/build.gradle
@@ -17,6 +17,7 @@
 dependencyManagement {
 	imports {
 		mavenBom "org.springframework:spring-framework-bom:${springVersion}"
+		mavenBom "org.springframework.security:spring-security-bom:${springSecurityVersion}"
 		mavenBom "io.projectreactor:reactor-bom:${reactorVersion}"
 	}
 }
@@ -33,10 +34,10 @@ dependencies {
 	optional("org.springframework:spring-webflux")
 	optional("io.projectreactor.netty:reactor-netty")
 
-	compile("org.springframework.security:spring-security-oauth2-client:${springSecurityVersion}") {
+	compile("org.springframework.security:spring-security-oauth2-client") {
 		exclude module: "spring-security-web"
 	}
-	optional("org.springframework.security:spring-security-config:${springSecurityVersion}")
+	optional("org.springframework.security:spring-security-config")
 
 	optional("org.apache.httpcomponents:httpclient:${httpClientVersion}") {
 		exclude(group: 'commons-logging', module: 'commons-logging')