config/src/main/java/org/springframework/security/config/annotation/web/reactive/WebFluxSecurityConfiguration.java
private SecurityWebFilterChain springSecurityFilterChain(ServerHttpSecurity http) {
		http
			.authorizeExchange()
				.anyExchange().authenticated();

		if (isOAuth2Present && OAuth2ClasspathGuard.shouldConfigure(this.context)) {
			OAuth2ClasspathGuard.configure(this.context, http);
		} else {
			http
				.httpBasic().and()
				.formLogin();
		}

		SecurityWebFilterChain result = http.build();
		return result;
	}
private SecurityWebFilterChain springSecurityFilterChain(ServerHttpSecurity http) {
		http
			.authorizeExchange()
				.anyExchange().authenticated();

		if (isOAuth2Present && OAuth2ClasspathGuard.shouldConfigure(this.context)) {
			OAuth2ClasspathGuard.configure(this.context, http);
		} else {
			http
				.httpBasic().and()
				.formLogin();
		}

		SecurityWebFilterChain result = http.build();
		return result;
	}
The default {@link ServerHttpSecurity} configuration.
@param http
@return