spring-boot在spring-jpa中使用EnableGlobalMethodSecurity时的奇怪异常

Question

当我在没有@EnableGlobalMethodSecurity注释的情况下运行我的应用程序时，它工作得很好。但是，我想添加对@secreted注释的支持，所以我想添加它。当我这样做时（如图所示），我开始立即在测试中获得这些异常。

@ComponentScan("ltistarter")
@Configuration
@EnableAutoConfiguration
@EnableTransactionManagement // enables TX management and @Transaction
@EnableCaching // enables caching and @Cache* tags
@EnableWebMvcSecurity // enable spring security and web mvc hooks
@EnableGlobalMethodSecurity(securedEnabled = true, proxyTargetClass = true) // allows @Secured flag
public class Application extends WebMvcConfigurerAdapter {

    public static void main(String[] args) {
        SpringApplication.run(Application.class, args);
    }
...

@Transactional
public interface LtiKeyRepository extends PagingAndSortingRepository<LtiKeyEntity, Long> {
    /**
     * @param key the unique key
     * @return the LtiKeyEntity OR null if there is no entity matching this key
     */
    LtiKeyEntity findByKeyKey(String key);

    /**
     * @param key the unique key
     * @return the number of keys removed (0 or 1)
     */
    int deleteByKeyKey(String key);
}

Answer 1

我通过从@EnableGlobalMethodSecurity中删除ProxyTargetClass=true来解决这个问题，如下所示：

@ComponentScan("ltistarter")
@Configuration
@EnableAutoConfiguration
@EnableTransactionManagement // enables TX management and @Transaction
@EnableCaching // enables caching and @Cache* tags
@EnableWebMvcSecurity // enable spring security and web mvc hooks
@EnableGlobalMethodSecurity(prePostEnabled = true, securedEnabled = true)
// allows @Secured flag - proxyTargetClass = true causes this to die
public class Application extends WebMvcConfigurerAdapter {
...

您可以在这里看到代码：

https://github.com/azeckoski/lti_starter