The validation warning is shown under the deprecated and removed in Security 6 WebSecurityConfigurerAdapter however the rather limited quick fix is not showing.
The issue is that recipe id has changed since the class has moved to a different package.