Spring Security错误：java.lang.IllegalStateException：无法在自身之后配置anyRequest

Question

我在尝试启动spring boot应用程序时遇到了这个错误，我似乎想不出原因。任何帮助都是非常感谢的。

org.springframework.beans.factory.beanCreationException：创建类路径资源[org/springframework/security/config/annotation/web/configuration/websecurityconfiguration.class]中定义的名为“Spring SecurityFilterChain”的bean时出错：通过工厂方法实例化bean失败；嵌套异常为org.springframework.beans.BeanInstantiationException：无法实例化[javax.servlet.filter]:工厂方法“Spring SecurityFilterChain”引发异常；嵌套异常为java.lang.IllegalStateException：无法在自身之后配置anyRequest

super.configure（http）方法失败。这是我的'SpringSecurityConfig.java'类

@Configuration
@EnableWebSecurity(debug = true)
public class SpringSecurityConfig extends WebSecurityConfigurerAdapter {
    @Autowired
    private CustomUserDetailService customUserDetailsService;

    @Bean
    public JWTAuthenticationFilter jwtAuthenticationFilter() {
        return new JWTAuthenticationFilter();
    }

    @Override
    protected void configure(HttpSecurity http) throws Exception {
        http
                .cors()
                .and()
                .csrf()
                .disable()
                .authorizeRequests()
                .antMatchers("/auth/**").permitAll()
                .anyRequest()
                .authenticated()
                .and()
                .sessionManagement()
                .sessionCreationPolicy(SessionCreationPolicy.STATELESS);

            http.addFilterBefore(jwtAuthenticationFilter(), UsernamePasswordAuthenticationFilter.class);

        super.configure(http);
    }




    @Bean
    public BCryptPasswordEncoder bCryptPasswordEncoder() {

        return new BCryptPasswordEncoder();
    }

    @Bean
    @Override
    public AuthenticationManager authenticationManagerBean() throws Exception {
        return super.authenticationManagerBean();
    }
}

全堆栈跟踪

Answer 1

您不应调用super.configure(http)，因为您要使用自定义安全配置。

该错误是由于父configure(http)方法已经在调用.AuthorizeRequests().AnyRequest().Authenticated()以及错误消息中提到的

无法在自身之后配置anyRequest