Provide XML namespace support for OAuth2Login

[tiwatsuka]

Summary

Does it have any plan to add the way to configure OAuth2Login with XML namespace?
I think there are some projects still using XML configuration for security settings.
If we can define the beans related OAuth2Login just by setting about ClientRegistration with XML, it's very useful.

Related #5184

[jgrandja]

@tiwatsuka We haven't decided whether to add XML namespace support. It definitely won't make it into 5.0 GA. We may consider it in a subsequent release.

[tiwatsuka]

@jgrandja I see. I'll expect that it is finally added. Thank you for your consideration.

[jgrandja]

@tiwatsuka Just to confirm, we will be adding XML namespace support. We'll do our best to get this in 5.1.

[pthorson]

So 5.2 then or not at all? I have a large existing Spring MVC project with XML configuration that I need to add OAuth to today. Can I mix the namespace and Java config?

[jgrandja]

@pthorson This won't get into 5.2. Unless you'd be interested in submitting a PR? There are other higher priority items at the moment and there hasn't been much demand to add this support as of yet.

That being said, you should be able to mix namespace and Java config - see Importing XML Configuration

[pthorson]

Understood. Not sure of appetite here for a PR. That being said, is OAuth 2.0 and Open ID Connect possible now without Spring Boot being used? Based on the matrix it looks like Spring Boot 1.5x was previously required.

[rwinch]

@pthorson The new support does not require Spring Boot (however, it is certainly easier to use with it)

[bendem]

Hi, I'd like to request once again that feature. I just had to migrate our xml config for security to java config because there was no equivalent to org.springframework.security.config.annotation.web.builders.HttpSecurity#oauth2Login in xml. The Java config is less clear and more error prone. It's really annoying that there is no parity between the capabilities of org.springframework.security.config.annotation.web.builders.HttpSecurity and the spring-security xml namespace.