From 17a56a1000ea758409ee48951fea9e24ec4c15f5 Mon Sep 17 00:00:00 2001
From: Rob Winch <rwinch@vmware.com>
Date: Wed, 2 Jun 2021 17:05:52 -0500
Subject: [PATCH] Use New Lamda Security Syntax

---
 .../io/spring/sample/graphql/SecurityConfig.java     | 12 +++++++-----
 1 file changed, 7 insertions(+), 5 deletions(-)

diff --git a/samples/webflux-security/src/main/java/io/spring/sample/graphql/SecurityConfig.java b/samples/webflux-security/src/main/java/io/spring/sample/graphql/SecurityConfig.java
index d0a139f5..145b6ea1 100644
--- a/samples/webflux-security/src/main/java/io/spring/sample/graphql/SecurityConfig.java
+++ b/samples/webflux-security/src/main/java/io/spring/sample/graphql/SecurityConfig.java
@@ -10,6 +10,8 @@ import org.springframework.security.core.userdetails.User;
 import org.springframework.security.core.userdetails.UserDetails;
 import org.springframework.security.web.server.SecurityWebFilterChain;
 
+import static org.springframework.security.config.Customizer.withDefaults;
+
 @Configuration
 @EnableWebFluxSecurity
 @EnableReactiveMethodSecurity
@@ -17,14 +19,14 @@ public class SecurityConfig {
 
 	@Bean
 	SecurityWebFilterChain springWebFilterChain(ServerHttpSecurity http) throws Exception {
-		http.csrf().disable();
 		return http
+				.csrf(c -> c.disable())
 				// Demonstrate that method security works
 				// Best practice to use both for defense in depth
-				.authorizeExchange()
-				.anyExchange().permitAll()
-				.and()
-				.httpBasic().and()
+				.authorizeExchange(requests -> requests
+					.anyExchange().permitAll()
+				)
+				.httpBasic(withDefaults())
 				.build();
 	}