The current structure is a bit messed up. We could do with a web package in there somewhere.
Comment From: wilkinsona
I'm a bit worried about this breaking things. Any third-party starter that was using @AutoConfigureBefore or @AutoConfigureAfter and referencing one of the repackaged auto-configurations will be broken.
Comment From: snicoll
Besides breaking use of auto-configurations, this actually moves EndpointRequest and PathRequest and breaks any user customizing security for actuator endpoints or static resources namely.
Comment From: wilkinsona
For when we have another go at making this change, there was a bug in the newly restructured auto-configuration that meant that UserDetailsServiceAutoConfiguration could have its conditions evaluated before an ObjectPostProcessor bean had been defined. I fixed it like this.