See Authorize HttpServletRequests with AuthorizationFilter documentation.
Mark old syntax starting with .authorizeRequests with warning/info markers. Implement a quick fix as an OpenRewrite recipe that would replace it with .authorizeHttpRequests and all corresponding method invocations chained to the call above.