Forma correta:
@Bean
public SecurityFilterChain filtrosSeguranca(HttpSecurity http) throws Exception {
return http
.sessionManagement(sm ->
sm.sessionCreationPolicy(SessionCreationPolicy.STATELESS)
)
.build();
}