Our organization is doing massive updates to all our Java apps. We are moving from Spring 5 to Spring 6 and Java 8 to Java 17 at the same time.

One of our web apps which was “open” under Spring Security 5 has suddenly started asking for a username and password. Did the Spring Security defaults (such as “authorization/no authorization”) change in the move from 5 to 6?

This is new territory for me, so I am flying pretty blind. I am not expecting anyone to “fix” this problem for me, just a simple “check this page” would be fine.