无法将DaoAuthenticationConfigurer应用于已构建的对象

时间:2014-10-13 21:07:26

标签: java spring spring-security jhipster codeship

我得到了这个例外:

[WARN] org.springframework.web.context.support.GenericWebApplicationContext - Exception encountered during context initialization - cancelling refresh attempt
org.springframework.beans.factory.BeanCreationException: Error creating bean with name 'accountResource': Injection of autowired dependencies failed; nested exception is org.springframework.beans.factory.BeanCreationException: Could not autowire field: private io.ilopezluna.japanathome.service.UserService io.ilopezluna.japanathome.web.rest.AccountResource.userService; nested exception is org.springframework.beans.factory.BeanCreationException: Error creating bean with name 'userService': Injection of autowired dependencies failed; nested exception is org.springframework.beans.factory.BeanCreationException: Could not autowire field: private org.springframework.security.crypto.password.PasswordEncoder io.ilopezluna.japanathome.service.UserService.passwordEncoder; nested exception is org.springframework.beans.factory.BeanCreationException: Error creating bean with name 'securityConfiguration': Injection of autowired dependencies failed; nested exception is java.lang.IllegalStateException: Cannot apply org.springframework.security.config.annotation.authentication.configurers.userdetails.DaoAuthenticationConfigurer@54aa5730 to already built object
    at org.springframework.beans.factory.annotation.AutowiredAnnotationBeanPostProcessor.postProcessPropertyValues(AutowiredAnnotationBeanPostProcessor.java:293) ~[spring-beans-4.0.7.RELEASE.jar:4.0.7.RELEASE]
    at org.springframework.beans.factory.support.AbstractAutowireCapableBeanFactory.populateBean(AbstractAutowireCapableBeanFactory.java:1186) ~[spring-beans-4.0.7.RELEASE.jar:4.0.7.RELEASE]

您可以在https://travis-ci.org/ilopezluna/japan-at-home/builds/37866955

上查看更多内容

在执行测试期间抛出此异常。但是我无法在我的本地主机上重现它,我总是获得成功:S

1 个答案:

答案 0 :(得分:11)

我花了两天时间,但我相信我终于解决了这个问题。在我的SecurityConfiguration课程中,我有以下方法:

@Configuration
@EnableWebMvcSecurity
@EnableGlobalMethodSecurity(jsr250Enabled=true, prePostEnabled=true)
public class SecurityConfiguration extends WebSecurityConfigurerAdapter {

    @Autowired
    public void configureGlobal(AuthenticationManagerBuilder auth) throws Exception {
        auth.userDetailsService(authenticationService);
    }

}

我用configureGlobal方法替换了configure方法:

    @Override
    public void configure(AuthenticationManagerBuilder auth) throws Exception {
        auth.userDetailsService(authenticationService);
    }

现在一切正常。

根据this answer,区别在于使用configureGlobal将允许全局方法安全性AuthenticationManager或其他HttpSecurity(WebSecurityConfigurerAdapter)。

如您所见,我正在启用Web Mvc Security和全局方法安全性。根据我的单元测试,两者都继续使用这个更改,但是我的办公室在这里有一些关于此更改是否正确(即,是否正确配置全局方法安全性)的争论,或者如果此解决方案存在其他问题。

我们认为问题的根本原因是某种类型的Spring bug,可能是竞争条件。虽然看起来不太可能,但只有当我们在项目中添加一个空类时,问题才会显现出来,这与类的包或名称无关。