由以下原因引起：java.lang.非法状态异常：发现 Web 安全配置器适配器以及安全筛选器链。请只选择一个

Question

我正在将Spring启动 2.5.12 升级到 2.7.2。根据给出的链接

@Configuration
@EnableWebSecurity
@Order(1)
public class BasicAuthC {
@Bean
    public SecurityFilterChain filterChain(HttpSecurity http) throws Exception {
        http
                .requestMatchers().antMatchers("/api/anything"")
                .and()
                .authorizeRequests(requests -> requests.anyRequest().fullyAuthenticated())
                .httpBasic()
         return http.build();
    }

    @Bean
    public InMemoryUserDetailsManager memoryUserDetailsManager() {
        PasswordEncoder encoder = PasswordEncoderFactories.createDelegatingPasswordEncoder();

        return  new InMemoryUserDetailsManager (User.withUsername("testUserName").password(encoder.encode("****")).
                authorities(new SimpleGrantedAuthority("SOME_ROLE")).build());

    }
}   


import com.azure.spring.aad.webapi.AADJwtBearerTokenAuthenticationConverter;
import org.springframework.context.annotation.Bean;
import org.springframework.context.annotation.Configuration;
import org.springframework.context.annotation.Profile;
import org.springframework.core.annotation.Order;
import org.springframework.http.HttpMethod;
import org.springframework.security.config.annotation.method.configuration.EnableGlobalMethodSecurity;
import org.springframework.security.config.annotation.web.builders.HttpSecurity;
import org.springframework.security.config.annotation.web.builders.WebSecurity;
import org.springframework.security.config.annotation.web.configuration.EnableWebSecurity;
import org.springframework.security.config.annotation.web.configuration.WebSecurityCustomizer;
import org.springframework.security.web.SecurityFilterChain;

@Order(2)
@EnableWebSecurity
@EnableGlobalMethodSecurity(prePostEnabled = true)
@Configuration
public class OAuthTwoConfiguration  {

    @Profile(value="OAUTHPROFILE")
    @Bean
    public SecurityFilterChain securityFilterChain(HttpSecurity http) throws Exception {
        http.authorizeRequests().antMatchers("/api/test").permitAll()
                .and().authorizeRequests((requests) -> requests.anyRequest().authenticated())
                .oauth2ResourceServer()
                .jwt()
                .jwtAuthenticationConverter(new AADJwtBearerTokenAuthenticationConverter());
        return http.build();
    }

    @Profile(value = "test")
    @Bean
    public WebSecurityCustomizer WebSecurityCustomizer () throws Exception {

        return (web)->web.ignoring().antMatchers("/someAPI");
    }
}

原因：org.springframework.html" target="_blank">beans。BeanInstationException:未能实例化[javax.servlet.Filter]：工厂方法“springSecurityFilterChain”引发异常；嵌套异常是java.lang.IllegalStateException：找到了WebSecurity配置适配器以及SecurityFilterChain。请仅选择一个。在org.springframework.beans.factory.support.simpleinstantationstrategy.instantiate（simpleinstationstratigy.java:185）~[spring-beans-5.3.22.jar:5.2.22]和org.spring-frameworks.bean.factorysupport.ConstructorResolver.instantiate（ConstructorResolver.java:653）~[spring-beans-5.4.22Web安全配置适配器以及安全过滤器链。请仅选择一个。在org.springframework.util.Assert.state（Assert.java:76）~[spring-core-5.3.22.jar:5.2.22]在org.springframework.security.config.annotation.web.configuration.WebSecurityConfiguration.springSecurityFilterChain（websecurity-configuration.java:106）~[spring-security-config-5.7.2.jar:5.7.2]在java.base/jdk.internal.reflect.NativeMethodAccessorImpl。在java.base/jdk.internal.reflect.NativeMethodAccessorImpl.invoke（NativeMethodAccessorImpl.java:62）~[na:na]在java.base/jdk.internal.reflect.DelegatingMethodAccessorImpl.invoke（DelegatingMethodAccessorImpl.java:43）~[na:na]位于java.base/java.lang.Refract.Method.invoke处（Method.java:566）~[na:na]org.springframework.beans.factory.support.SimpleInstantiationStrategy.instantiate（SimpleInstationStrategie.java:154）~[spring-beans-5.3.22.jar:5.3.22]…省略了22个公共框架

Answer 1

您的代码或您使用的某些库仍在提供 Web 安全配置器适配器。

再次检查你的代码，也许你忘记了一些地方。

尝试将您使用的库更新到最新版本。

如果它们尚未迁移，则可能需要等到迁移后再删除 Web安全配置器适配器。