In future versions of Spring Security, we should move away from PathMatcher (used by AntPathRequestMatcher) and HandlerMappingIntrospector (used by MvcRequestMatcher) as they are deprecated Spring Framework 7.0 M1.

This will also assist with efforts to simplify construction of path-based RequestMatchers.

  • [ ] Add mechanism to opt into PathPatternRequestMatcher in XML

Comment From: evgeniycheban

Hi, @jzheaux, can I work on this? I'd want to start with adding PathPatternRequestMatcher along with tests.

Comment From: jzheaux

Hi, @evgeniycheban, thanks for volunteering! Some of this is already addressed in a draft PR, so allow me to clean that up first so it's clear what work remains. I'll report back here when that's ready, and then we can divvy out the remaining work.

Comment From: jzheaux

@evgeniycheban, if you don't mind following the draft PR while I'm gathering feedback for it, #16500 and #16501 are ready to begin work on.

Comment From: evgeniycheban

@jzheaux sure, please assign #16501 to me.