HttpSecurity http.authorizeRequests() is depracated

[kangourouNomade]

@bean
public SecurityFilterChain filterChain(HttpSecurity http) throws Exception {
return http
.authorizeRequests() - deprecated
.mvcMatchers("/design", "/orders").hasRole("USER")
.anyRequest().permitAll()
}

looks like nowadays it should be:

@bean
public SecurityFilterChain filterChain(HttpSecurity http) throws Exception {
return http
.authorizeHttpRequests()
.requestMatchers("/design", "/orders").hasRole("USER")
.requestMatchers("/", "/**").permitAll()
.and()
.build();
}

[HeyHiHello]

The following works for me

@Bean
    public SecurityFilterChain filterChain(HttpSecurity http) throws Exception {
        return http
                .authorizeHttpRequests(auth->{
                    auth
                            .requestMatchers("/design", "/orders").hasRole("USER")
                            .requestMatchers("/", "/**").permitAll();})
//                .formLogin(loginConf->{
//                    loginConf
//                            .loginPage("/login")
//                            .loginProcessingUrl("/login")
//                            .usernameParameter("username")
//                            .passwordParameter("password")
//                            .defaultSuccessUrl("/design");})
                .formLogin(loginConf-> {})
                .csrf(csrfConf->{
                    csrfConf.ignoringRequestMatchers("/h2-console/**");
                })
                .headers(headersConf ->
                        headersConf
                                .frameOptions(HeadersConfigurer.FrameOptionsConfig::disable))
                .build();
    }