There is no way to configure the rethrowAuthenticationServiceException flag for ServerHttpSercurity#httpBasic or #oauth2ResourceServer.

This is problematic since it means that users upgrading to 5.8 will not have a clear way to opt-in to the 6.0 behavior nor opt-out after upgrading.

While adding methods is typically an enhancement, it makes sense to add it here since the original feature is otherwise incomplete without an ability to use it to prepare for the upgrade.