As part of migration to 7 from 6.5, PathPatternRequestMatcherBuilderFactoryBean
and PathPatternMessageMatcherBuilderFactoryBean
were added to allow applications to opt-in to the Spring Security 7 default behavior.
This works for the Java RequestMatcher DSL, the XML RequestMatcher DSL, and the Java MessageMatcher DSL, but not the XML MessageMatcher DSL.
The reason for this is WebSocketMessageBrokerSecurityBeanDefinitionParser
is not picking up the PathPatternMessageMatcher.Builder
published by the factory bean.