Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

EnableMethodSecurity should publish only one bean of each AuthorizationAdvisor #15592

Closed
jzheaux opened this issue Aug 13, 2024 · 0 comments
Closed

EnableMethodSecurity should publish only one bean of each AuthorizationAdvisor #15592

jzheaux opened this issue Aug 13, 2024 · 0 comments
Assignees
@jzheaux
Labels
in: config An issue in spring-security-config type: bug A general bug
Milestone
6.3.2

Comments

@jzheaux
Copy link
Contributor

jzheaux commented Aug 13, 2024 •
edited
Loading

@EnableMethodSecurity, and more specifically MethodSecurityAdvisorRegistrar registers each Spring Security method interceptor separately as an advisor. Currently, though, it duplicates the bean definition of each one, causing two instances of each AuthorizationAdvisor in the application context.

This causes some unexpected behavior for beans that would like to depend on the list of AuthorizationAdvisor instances, for example in the case of AuthorizationProxyConfiguration.
@jzheaux jzheaux added in: config An issue in spring-security-config type: bug A general bug labels Aug 13, 2024
@jzheaux jzheaux added this to the 6.3.2 milestone Aug 13, 2024
@jzheaux jzheaux self-assigned this Aug 13, 2024
@jzheaux jzheaux mentioned this issue Aug 14, 2024
Closed
@sjohnr sjohnr modified the milestones: 6.3.2, 6.3.3 Aug 19, 2024
jzheaux added a commit that referenced this issue Aug 19, 2024
@jzheaux
Simplify Method Interceptor Configuration
27af1df 
Simplifies to use only one ObjectProvider for easier
future maintenance

Issue gh-15592
jzheaux added a commit to jzheaux/spring-security that referenced this issue Sep 16, 2024
@jzheaux
Test Reactive Method Security Exactly Once Semantics
20ee913 
Issue spring-projectsgh-15592
jzheaux added a commit that referenced this issue Sep 16, 2024
@jzheaux
Test Reactive Method Security Exactly Once Semantics
1aec571 
Issue gh-15592
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees

@jzheaux jzheaux

Labels
in: config An issue in spring-security-config type: bug A general bug
Projects
None yet
Milestone
6.3.2
Development

No branches or pull requests
2 participants
@jzheaux @sjohnr