SecurityConfigurer.init Javadoc should state that applying other configurers should be performed in this method

[rwinch]

Summary

The Javadoc for SecurityConfigurer.init() should clarify that applying configurers should be performed in init as well.

[clementkng]

Hi @rwinch, could I try taking a stab at this issue?

[rwinch]

@clementkng Thanks for volunteering! Yes the issue is yours.

[clementkng]

applying configurers should be performed in init as well

@rwinch I'm a little confused by this statement. Where else are configurers applied? Does this statement mean that each configure(SecurityBuilder) is invoked (in the top of the spec, describing the SecurityConfigurer interface)?

[rwinch]

Most of the methods on HttpSecurity apply a configurer. For example, invoking formLogin invokes a configurer. If you are to do that within another Configurer..it must be done in the init method