Closed
Description
While, NoOpPasswordEncoder
is marked as deprecated we should clearly indicate that it is not going to be removed. Many of the other insecure PasswordEncoder implementations (i.e. MessageDigestPasswordEncoder) have the following in the deprecation warning:
There are no plans to remove this support. It is deprecated to indicate that this is a legacy implementation and using it is considered insecure.
We should add the same to NoOpPasswordEncoder
See gh-8498