Closed
Description
Describe the bug
The order of the security filters is documented at org.springframework.security.config.annotation.web.HttpSecurityBuilder#addFilter, but that order does not appear to be consistent with what the actual code at org.springframework.security.config.annotation.web.builders.FilterOrderRegistration#FilterOrderRegistration does.
Notice, for instance, that the order of ForceEagerSessionCreationFilter
and DisableEncodeUrlFilter
are switched between the documentation and the actual code.