anchor.diff:  new ServiceAuthenticationDetailsSource(serviceProperties, artifactId);
   ----
   
  +[[m3to4-deprecations-config]]
   === spring-security-config
   
  +
  +[[m3to4-deprecations-config-fids]]
   ==== filter-invocation-definition-source
   
   The XML element `filter-invocation-definition-source` was removed in favor of <<nsa-filter-security-metadata-source,filter-security-metadata-source>>.
  
positive.code: </http>
  ----
  
  ==== filter-chain-map@path-type
  The XML attribute `filter-chain-map@path-type` was removed in favor of <<nsa-filter-chain-map-request-matcher,filter-chain-map@request-matcher>>.
  This means if you have something like this:
  
negative.code: CompositeSessionAuthenticationStrategy strategy = new CompositeSessionAuthenticationStrategy(delegates);
  ----
  
  [[m3to4-deprecations-web-sfps]]
  ==== SessionFixationProtectionStrategy
  
  `SessionFixationProtectionStrategy` removed `setRetainedAttributes` method in favor of users subclassing `SessionFixationProtectionStrategy` and overriding `extractAttributes` method.
  
  [[m3to4-deprecations-web-baf]]
  ==== BasicAuthenticationFilter
  
  `BasicAuthenticationFilter` default constructor and the `setAuthenticationManager` and `setRememberMeServices` methods were removed in favor of constructor injection.
  