(nifi) branch main updated: NIFI-16300 Fixed deprecated usage in BearerTokenAuthenticationFilter (#11630)

[pvillard]

This is an automated email from the ASF dual-hosted git repository.

pvillard31 pushed a commit to branch main
in repository https://gitbox.apache.org/repos/asf/nifi.git


The following commit(s) were added to refs/heads/main by this push:
     new 980960db3bd NIFI-16300 Fixed deprecated usage in 
BearerTokenAuthenticationFilter (#11630)
980960db3bd is described below

commit 980960db3bdae47390d99afbbce68f5f02257e79
Author: David Handermann <exceptionfact...@apache.org>
AuthorDate: Fri Sep 4 12:00:51 2026 -0500

    NIFI-16300 Fixed deprecated usage in BearerTokenAuthenticationFilter 
(#11630)
---
 .../configuration/JwtAuthenticationSecurityConfiguration.java  | 10 +++++++---
 1 file changed, 7 insertions(+), 3 deletions(-)

diff --git 
a/nifi-framework-bundle/nifi-framework/nifi-web/nifi-web-security/src/main/java/org/apache/nifi/web/security/configuration/JwtAuthenticationSecurityConfiguration.java
 
b/nifi-framework-bundle/nifi-framework/nifi-web/nifi-web-security/src/main/java/org/apache/nifi/web/security/configuration/JwtAuthenticationSecurityConfiguration.java
index 2008570d534..82126c0680d 100644
--- 
a/nifi-framework-bundle/nifi-framework/nifi-web/nifi-web-security/src/main/java/org/apache/nifi/web/security/configuration/JwtAuthenticationSecurityConfiguration.java
+++ 
b/nifi-framework-bundle/nifi-framework/nifi-web/nifi-web-security/src/main/java/org/apache/nifi/web/security/configuration/JwtAuthenticationSecurityConfiguration.java
@@ -46,6 +46,7 @@ import org.springframework.security.oauth2.jwt.JwtDecoder;
 import 
org.springframework.security.oauth2.server.resource.authentication.JwtAuthenticationProvider;
 import 
org.springframework.security.oauth2.server.resource.web.BearerTokenAuthenticationEntryPoint;
 import 
org.springframework.security.oauth2.server.resource.web.BearerTokenResolver;
+import 
org.springframework.security.oauth2.server.resource.web.authentication.BearerTokenAuthenticationConverter;
 import 
org.springframework.security.oauth2.server.resource.web.authentication.BearerTokenAuthenticationFilter;
 
 import java.security.KeyPairGenerator;
@@ -97,14 +98,17 @@ public class JwtAuthenticationSecurityConfiguration {
      * Bearer Token Authentication Filter responsible for reading and 
authenticating Bearer JSON Web Tokens from HTTP Requests
      *
      * @param authenticationManager Authentication Manager configured with JWT 
Authentication Provider
+     * @param authenticationDetailsSource Authentication Details Source for 
Converter
      * @return Bearer Token Authentication Filter
      */
     @Bean
     public BearerTokenAuthenticationFilter 
bearerTokenAuthenticationFilter(final AuthenticationManager 
authenticationManager,
         final AuthenticationDetailsSource<HttpServletRequest, 
NiFiWebAuthenticationDetails> authenticationDetailsSource) {
-        final BearerTokenAuthenticationFilter bearerTokenAuthenticationFilter 
= new BearerTokenAuthenticationFilter(authenticationManager);
-        
bearerTokenAuthenticationFilter.setAuthenticationDetailsSource(authenticationDetailsSource);
-        
bearerTokenAuthenticationFilter.setBearerTokenResolver(bearerTokenResolver());
+        final BearerTokenAuthenticationConverter authenticationConverter = new 
BearerTokenAuthenticationConverter();
+        
authenticationConverter.setAuthenticationDetailsSource(authenticationDetailsSource);
+        authenticationConverter.setBearerTokenResolver(bearerTokenResolver());
+
+        final BearerTokenAuthenticationFilter bearerTokenAuthenticationFilter 
= new BearerTokenAuthenticationFilter(authenticationManager, 
authenticationConverter);
         
bearerTokenAuthenticationFilter.setAuthenticationEntryPoint(authenticationEntryPoint());
         return bearerTokenAuthenticationFilter;
     }