Cwikius-Spring/spring-security
1
0
Fork 0
mirror of https://github.com/spring-projects/spring-security.git synced 2025-06-29 15:22:15 +00:00
Code Issues Packages Projects Releases Wiki Activity

Favor ObjectProvider

Browse Source 
Closes gh-15805
This commit is contained in:
Tran Ngoc Nhan 2024-09-19 19:40:56 +07:00 committed by Josh Cummings
parent 9dda65a5e3
commit e618fc425d
24 changed files with 106 additions and 231 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

22
config/src/main/java/org/springframework/security/config/annotation/authentication/configuration/AuthenticationConfiguration.java
View File

@ -1,5 +1,5 @@
/* /*
* Copyright 2002-2022 the original author or authors. * Copyright 2002-2024 the original author or authors.
* *
* Licensed under the Apache License, Version 2.0 (the "License"); * Licensed under the Apache License, Version 2.0 (the "License");
* you may not use this file except in compliance with the License. * you may not use this file except in compliance with the License.
@ -28,7 +28,6 @@ import org.apache.commons.logging.LogFactory;
import org.springframework.aop.framework.ProxyFactoryBean; import org.springframework.aop.framework.ProxyFactoryBean;
import org.springframework.aop.target.LazyInitTargetSource; import org.springframework.aop.target.LazyInitTargetSource;
import org.springframework.beans.factory.BeanFactoryUtils; import org.springframework.beans.factory.BeanFactoryUtils;
import org.springframework.beans.factory.NoSuchBeanDefinitionException;
import org.springframework.beans.factory.annotation.Autowired; import org.springframework.beans.factory.annotation.Autowired;
import org.springframework.context.ApplicationContext; import org.springframework.context.ApplicationContext;
import org.springframework.context.ConfigurableApplicationContext; import org.springframework.context.ConfigurableApplicationContext;
@ -57,6 +56,7 @@ import org.springframework.util.Assert;
* Exports the authentication {@link Configuration} * Exports the authentication {@link Configuration}
* *
* @author Rob Winch * @author Rob Winch
* @author Ngoc Nhan
* @since 3.2 * @since 3.2
* *
*/ */
@ -197,15 +197,6 @@ public class AuthenticationConfiguration {
return lazyBean(AuthenticationManager.class); return lazyBean(AuthenticationManager.class);
} }
private static <T> T getBeanOrNull(ApplicationContext applicationContext, Class<T> type) {
try {
return applicationContext.getBean(type);
}
catch (NoSuchBeanDefinitionException notFound) {
return null;
}
}
private static class EnableGlobalAuthenticationAutowiredConfigurer extends GlobalAuthenticationConfigurerAdapter { private static class EnableGlobalAuthenticationAutowiredConfigurer extends GlobalAuthenticationConfigurerAdapter {
private final ApplicationContext context; private final ApplicationContext context;
@ -330,12 +321,9 @@ public class AuthenticationConfiguration {
if (this.passwordEncoder != null) { if (this.passwordEncoder != null) {
return this.passwordEncoder; return this.passwordEncoder;
} }
PasswordEncoder passwordEncoder = getBeanOrNull(this.applicationContext, PasswordEncoder.class); this.passwordEncoder = this.applicationContext.getBeanProvider(PasswordEncoder.class)
if (passwordEncoder == null) { .getIfUnique(PasswordEncoderFactories::createDelegatingPasswordEncoder);
passwordEncoder = PasswordEncoderFactories.createDelegatingPasswordEncoder(); return this.passwordEncoder;
}
this.passwordEncoder = passwordEncoder;
return passwordEncoder;
} }
@Override @Override

7
config/src/main/java/org/springframework/security/config/annotation/authentication/configuration/InitializeUserDetailsBeanManagerConfigurer.java
View File

@ -39,6 +39,7 @@ import org.springframework.security.crypto.password.PasswordEncoder;
* {@link PasswordEncoder} is defined will wire this up too. * {@link PasswordEncoder} is defined will wire this up too.
* *
* @author Rob Winch * @author Rob Winch
* @author Ngoc Nhan
* @since 4.1 * @since 4.1
*/ */
@Order(InitializeUserDetailsBeanManagerConfigurer.DEFAULT_ORDER) @Order(InitializeUserDetailsBeanManagerConfigurer.DEFAULT_ORDER)
@ -121,11 +122,7 @@ class InitializeUserDetailsBeanManagerConfigurer extends GlobalAuthenticationCon
* component, null otherwise. * component, null otherwise.
*/ */
private <T> T getBeanOrNull(Class<T> type) { private <T> T getBeanOrNull(Class<T> type) {
String[] beanNames = InitializeUserDetailsBeanManagerConfigurer.this.context.getBeanNamesForType(type); return InitializeUserDetailsBeanManagerConfigurer.this.context.getBeanProvider(type).getIfUnique();
if (beanNames.length != 1) {
return null;
}
return InitializeUserDetailsBeanManagerConfigurer.this.context.getBean(beanNames[0], type);
} }
/** /**

25
config/src/main/java/org/springframework/security/config/annotation/method/configuration/GlobalMethodSecurityConfiguration.java
View File

@ -1,5 +1,5 @@
/* /*
* Copyright 2002-2022 the original author or authors. * Copyright 2002-2024 the original author or authors.
* *
* Licensed under the Apache License, Version 2.0 (the "License"); * Licensed under the Apache License, Version 2.0 (the "License");
* you may not use this file except in compliance with the License. * you may not use this file except in compliance with the License.
@ -27,7 +27,6 @@ import org.apache.commons.logging.LogFactory;
import org.springframework.beans.BeansException; import org.springframework.beans.BeansException;
import org.springframework.beans.factory.BeanFactory; import org.springframework.beans.factory.BeanFactory;
import org.springframework.beans.factory.BeanFactoryAware; import org.springframework.beans.factory.BeanFactoryAware;
import org.springframework.beans.factory.NoSuchBeanDefinitionException;
import org.springframework.beans.factory.SmartInitializingSingleton; import org.springframework.beans.factory.SmartInitializingSingleton;
import org.springframework.beans.factory.annotation.Autowired; import org.springframework.beans.factory.annotation.Autowired;
import org.springframework.beans.factory.config.BeanDefinition; import org.springframework.beans.factory.config.BeanDefinition;
@ -84,6 +83,7 @@ import org.springframework.util.Assert;
* *
* @author Rob Winch * @author Rob Winch
* @author Eddú Meléndez * @author Eddú Meléndez
* @author Ngoc Nhan
* @since 3.2 * @since 3.2
* @see EnableGlobalMethodSecurity * @see EnableGlobalMethodSecurity
* @deprecated Use {@link PrePostMethodSecurityConfiguration}, * @deprecated Use {@link PrePostMethodSecurityConfiguration},
@ -168,19 +168,19 @@ public class GlobalMethodSecurityConfiguration implements ImportAware, SmartInit
catch (Exception ex) { catch (Exception ex) {
throw new RuntimeException(ex); throw new RuntimeException(ex);
} }
PermissionEvaluator permissionEvaluator = getSingleBeanOrNull(PermissionEvaluator.class); PermissionEvaluator permissionEvaluator = getBeanOrNull(PermissionEvaluator.class);
if (permissionEvaluator != null) { if (permissionEvaluator != null) {
this.defaultMethodExpressionHandler.setPermissionEvaluator(permissionEvaluator); this.defaultMethodExpressionHandler.setPermissionEvaluator(permissionEvaluator);
} }
RoleHierarchy roleHierarchy = getSingleBeanOrNull(RoleHierarchy.class); RoleHierarchy roleHierarchy = getBeanOrNull(RoleHierarchy.class);
if (roleHierarchy != null) { if (roleHierarchy != null) {
this.defaultMethodExpressionHandler.setRoleHierarchy(roleHierarchy); this.defaultMethodExpressionHandler.setRoleHierarchy(roleHierarchy);
} }
AuthenticationTrustResolver trustResolver = getSingleBeanOrNull(AuthenticationTrustResolver.class); AuthenticationTrustResolver trustResolver = getBeanOrNull(AuthenticationTrustResolver.class);
if (trustResolver != null) { if (trustResolver != null) {
this.defaultMethodExpressionHandler.setTrustResolver(trustResolver); this.defaultMethodExpressionHandler.setTrustResolver(trustResolver);
} }
GrantedAuthorityDefaults grantedAuthorityDefaults = getSingleBeanOrNull(GrantedAuthorityDefaults.class); GrantedAuthorityDefaults grantedAuthorityDefaults = getBeanOrNull(GrantedAuthorityDefaults.class);
if (grantedAuthorityDefaults != null) { if (grantedAuthorityDefaults != null) {
this.defaultMethodExpressionHandler.setDefaultRolePrefix(grantedAuthorityDefaults.getRolePrefix()); this.defaultMethodExpressionHandler.setDefaultRolePrefix(grantedAuthorityDefaults.getRolePrefix());
} }
@ -188,13 +188,8 @@ public class GlobalMethodSecurityConfiguration implements ImportAware, SmartInit
this.defaultMethodExpressionHandler = this.objectPostProcessor.postProcess(this.defaultMethodExpressionHandler); this.defaultMethodExpressionHandler = this.objectPostProcessor.postProcess(this.defaultMethodExpressionHandler);
} }
private <T> T getSingleBeanOrNull(Class<T> type) { private <T> T getBeanOrNull(Class<T> type) {
try { return this.context.getBeanProvider(type).getIfUnique();
return this.context.getBean(type);
}
catch (NoSuchBeanDefinitionException ex) {
}
return null;
} }
private void initializeMethodSecurityInterceptor() throws Exception { private void initializeMethodSecurityInterceptor() throws Exception {
@ -262,7 +257,7 @@ public class GlobalMethodSecurityConfiguration implements ImportAware, SmartInit
decisionVoters.add(new Jsr250Voter()); decisionVoters.add(new Jsr250Voter());
} }
RoleVoter roleVoter = new RoleVoter(); RoleVoter roleVoter = new RoleVoter();
GrantedAuthorityDefaults grantedAuthorityDefaults = getSingleBeanOrNull(GrantedAuthorityDefaults.class); GrantedAuthorityDefaults grantedAuthorityDefaults = getBeanOrNull(GrantedAuthorityDefaults.class);
if (grantedAuthorityDefaults != null) { if (grantedAuthorityDefaults != null) {
roleVoter.setRolePrefix(grantedAuthorityDefaults.getRolePrefix()); roleVoter.setRolePrefix(grantedAuthorityDefaults.getRolePrefix());
} }
@ -373,7 +368,7 @@ public class GlobalMethodSecurityConfiguration implements ImportAware, SmartInit
sources.add(new SecuredAnnotationSecurityMetadataSource()); sources.add(new SecuredAnnotationSecurityMetadataSource());
} }
if (isJsr250Enabled) { if (isJsr250Enabled) {
GrantedAuthorityDefaults grantedAuthorityDefaults = getSingleBeanOrNull(GrantedAuthorityDefaults.class); GrantedAuthorityDefaults grantedAuthorityDefaults = getBeanOrNull(GrantedAuthorityDefaults.class);
Jsr250MethodSecurityMetadataSource jsr250MethodSecurityMetadataSource = this.context Jsr250MethodSecurityMetadataSource jsr250MethodSecurityMetadataSource = this.context
.getBean(Jsr250MethodSecurityMetadataSource.class); .getBean(Jsr250MethodSecurityMetadataSource.class);
if (grantedAuthorityDefaults != null) { if (grantedAuthorityDefaults != null) {

10
config/src/main/java/org/springframework/security/config/annotation/rsocket/RSocketSecurity.java
View File

@ -1,5 +1,5 @@
/* /*
* Copyright 2019-2021 the original author or authors. * Copyright 2019-2024 the original author or authors.
* *
* Licensed under the Apache License, Version 2.0 (the "License"); * Licensed under the Apache License, Version 2.0 (the "License");
* you may not use this file except in compliance with the License. * you may not use this file except in compliance with the License.
@ -108,6 +108,7 @@ import org.springframework.security.rsocket.util.matcher.RoutePayloadExchangeMat
* @author Luis Felipe Vega * @author Luis Felipe Vega
* @author Manuel Tejeda * @author Manuel Tejeda
* @author Ebert Toribio * @author Ebert Toribio
* @author Ngoc Nhan
* @since 5.2 * @since 5.2
*/ */
public class RSocketSecurity { public class RSocketSecurity {
@ -238,15 +239,12 @@ public class RSocketSecurity {
return getBeanOrNull(ResolvableType.forClass(beanClass)); return getBeanOrNull(ResolvableType.forClass(beanClass));
} }
@SuppressWarnings("unchecked")
private <T> T getBeanOrNull(ResolvableType type) { private <T> T getBeanOrNull(ResolvableType type) {
if (this.context == null) { if (this.context == null) {
return null; return null;
} }
String[] names = this.context.getBeanNamesForType(type); return (T) this.context.getBeanProvider(type).getIfUnique();
if (names.length == 1) {
return (T) this.context.getBean(names[0]);
}
return null;
} }
protected void setApplicationContext(ApplicationContext applicationContext) throws BeansException { protected void setApplicationContext(ApplicationContext applicationContext) throws BeansException {

8
config/src/main/java/org/springframework/security/config/annotation/web/builders/HttpSecurity.java
View File

@ -139,6 +139,7 @@ import org.springframework.web.servlet.handler.HandlerMappingIntrospector;
* *
* @author Rob Winch * @author Rob Winch
* @author Joe Grandja * @author Joe Grandja
* @author Ngoc Nhan
* @since 3.2 * @since 3.2
* @see EnableWebSecurity * @see EnableWebSecurity
*/ */
@ -3721,12 +3722,7 @@ public final class HttpSecurity extends AbstractConfiguredSecurityBuilder<Defaul
} }
private ObservationRegistry getObservationRegistry() { private ObservationRegistry getObservationRegistry() {
ApplicationContext context = getContext(); return getContext().getBeanProvider(ObservationRegistry.class).getIfUnique(() -> ObservationRegistry.NOOP);
String[] names = context.getBeanNamesForType(ObservationRegistry.class);
if (names.length == 1) {
return (ObservationRegistry) context.getBean(names[0]);
}
return ObservationRegistry.NOOP;
} }
/** /**

20
config/src/main/java/org/springframework/security/config/annotation/web/configuration/HttpSecurityConfiguration.java
View File

@ -20,7 +20,6 @@ import java.util.HashMap;
import java.util.List; import java.util.List;
import java.util.Map; import java.util.Map;
import org.springframework.beans.factory.NoSuchBeanDefinitionException;
import org.springframework.beans.factory.annotation.Autowired; import org.springframework.beans.factory.annotation.Autowired;
import org.springframework.context.ApplicationContext; import org.springframework.context.ApplicationContext;
import org.springframework.context.annotation.Bean; import org.springframework.context.annotation.Bean;
@ -56,6 +55,7 @@ import static org.springframework.security.config.Customizer.withDefaults;
* *
* @author Eleftheria Stein * @author Eleftheria Stein
* @author Jinwoo Bae * @author Jinwoo Bae
* @author Ngoc Nhan
* @since 5.4 * @since 5.4
*/ */
@Configuration(proxyBeanMethods = false) @Configuration(proxyBeanMethods = false)
@ -226,21 +226,9 @@ class HttpSecurityConfiguration {
if (this.passwordEncoder != null) { if (this.passwordEncoder != null) {
return this.passwordEncoder; return this.passwordEncoder;
} }
PasswordEncoder passwordEncoder = getBeanOrNull(PasswordEncoder.class); this.passwordEncoder = this.applicationContext.getBeanProvider(PasswordEncoder.class)
if (passwordEncoder == null) { .getIfUnique(PasswordEncoderFactories::createDelegatingPasswordEncoder);
passwordEncoder = PasswordEncoderFactories.createDelegatingPasswordEncoder(); return this.passwordEncoder;
}
this.passwordEncoder = passwordEncoder;
return passwordEncoder;
}
private <T> T getBeanOrNull(Class<T> type) {
try {
return this.applicationContext.getBean(type);
}
catch (NoSuchBeanDefinitionException ex) {
return null;
}
} }
@Override @Override

31
config/src/main/java/org/springframework/security/config/annotation/web/configurers/ExpressionUrlAuthorizationConfigurer.java
View File

@ -1,5 +1,5 @@
/* /*
* Copyright 2002-2022 the original author or authors. * Copyright 2002-2024 the original author or authors.
* *
* Licensed under the Apache License, Version 2.0 (the "License"); * Licensed under the Apache License, Version 2.0 (the "License");
* you may not use this file except in compliance with the License. * you may not use this file except in compliance with the License.
@ -75,6 +75,7 @@ import org.springframework.util.StringUtils;
* @param <H> the type of {@link HttpSecurityBuilder} that is being configured * @param <H> the type of {@link HttpSecurityBuilder} that is being configured
* @author Rob Winch * @author Rob Winch
* @author Yanming Zhou * @author Yanming Zhou
* @author Ngoc Nhan
* @since 3.2 * @since 3.2
* @see org.springframework.security.config.annotation.web.builders.HttpSecurity#authorizeRequests() * @see org.springframework.security.config.annotation.web.builders.HttpSecurity#authorizeRequests()
* @deprecated Use {@link AuthorizeHttpRequestsConfigurer} instead * @deprecated Use {@link AuthorizeHttpRequestsConfigurer} instead
@ -106,10 +107,9 @@ public final class ExpressionUrlAuthorizationConfigurer<H extends HttpSecurityBu
* @see HttpSecurity#authorizeRequests() * @see HttpSecurity#authorizeRequests()
*/ */
public ExpressionUrlAuthorizationConfigurer(ApplicationContext context) { public ExpressionUrlAuthorizationConfigurer(ApplicationContext context) {
String[] grantedAuthorityDefaultsBeanNames = context.getBeanNamesForType(GrantedAuthorityDefaults.class); GrantedAuthorityDefaults grantedAuthorityDefaults = context.getBeanProvider(GrantedAuthorityDefaults.class)
if (grantedAuthorityDefaultsBeanNames.length == 1) { .getIfUnique();
GrantedAuthorityDefaults grantedAuthorityDefaults = context.getBean(grantedAuthorityDefaultsBeanNames[0], if (grantedAuthorityDefaults != null) {
GrantedAuthorityDefaults.class);
this.rolePrefix = grantedAuthorityDefaults.getRolePrefix(); this.rolePrefix = grantedAuthorityDefaults.getRolePrefix();
} }
else { else {
@ -167,22 +167,11 @@ public final class ExpressionUrlAuthorizationConfigurer<H extends HttpSecurityBu
} }
ApplicationContext context = http.getSharedObject(ApplicationContext.class); ApplicationContext context = http.getSharedObject(ApplicationContext.class);
if (context != null) { if (context != null) {
String[] roleHiearchyBeanNames = context.getBeanNamesForType(RoleHierarchy.class); context.getBeanProvider(RoleHierarchy.class).ifUnique(defaultHandler::setRoleHierarchy);
if (roleHiearchyBeanNames.length == 1) { context.getBeanProvider(GrantedAuthorityDefaults.class)
defaultHandler.setRoleHierarchy(context.getBean(roleHiearchyBeanNames[0], RoleHierarchy.class)); .ifUnique((grantedAuthorityDefaults) -> defaultHandler
} .setDefaultRolePrefix(grantedAuthorityDefaults.getRolePrefix()));
String[] grantedAuthorityDefaultsBeanNames = context.getBeanNamesForType(GrantedAuthorityDefaults.class); context.getBeanProvider(PermissionEvaluator.class).ifUnique(defaultHandler::setPermissionEvaluator);
if (grantedAuthorityDefaultsBeanNames.length == 1) {
GrantedAuthorityDefaults grantedAuthorityDefaults = context
.getBean(grantedAuthorityDefaultsBeanNames[0], GrantedAuthorityDefaults.class);
defaultHandler.setDefaultRolePrefix(grantedAuthorityDefaults.getRolePrefix());
}
String[] permissionEvaluatorBeanNames = context.getBeanNamesForType(PermissionEvaluator.class);
if (permissionEvaluatorBeanNames.length == 1) {
PermissionEvaluator permissionEvaluator = context.getBean(permissionEvaluatorBeanNames[0],
PermissionEvaluator.class);
defaultHandler.setPermissionEvaluator(permissionEvaluator);
}
} }
this.expressionHandler = postProcess(defaultHandler); this.expressionHandler = postProcess(defaultHandler);
return this.expressionHandler; return this.expressionHandler;

14
config/src/main/java/org/springframework/security/config/annotation/web/configurers/RememberMeConfigurer.java
View File

@ -1,5 +1,5 @@
/* /*
* Copyright 2002-2023 the original author or authors. * Copyright 2002-2024 the original author or authors.
* *
* Licensed under the Apache License, Version 2.0 (the "License"); * Licensed under the Apache License, Version 2.0 (the "License");
* you may not use this file except in compliance with the License. * you may not use this file except in compliance with the License.
@ -18,7 +18,6 @@ package org.springframework.security.config.annotation.web.configurers;
import java.util.UUID; import java.util.UUID;
import org.springframework.beans.factory.NoSuchBeanDefinitionException;
import org.springframework.context.ApplicationContext; import org.springframework.context.ApplicationContext;
import org.springframework.security.authentication.AuthenticationManager; import org.springframework.security.authentication.AuthenticationManager;
import org.springframework.security.authentication.RememberMeAuthenticationProvider; import org.springframework.security.authentication.RememberMeAuthenticationProvider;
@ -78,6 +77,7 @@ import org.springframework.util.Assert;
* *
* @author Rob Winch * @author Rob Winch
* @author Eddú Meléndez * @author Eddú Meléndez
* @author Ngoc Nhan
* @since 3.2 * @since 3.2
*/ */
public final class RememberMeConfigurer<H extends HttpSecurityBuilder<H>> public final class RememberMeConfigurer<H extends HttpSecurityBuilder<H>>
@ -444,20 +444,12 @@ public final class RememberMeConfigurer<H extends HttpSecurityBuilder<H>>
if (shared != null) { if (shared != null) {
return shared; return shared;
} }
return getBeanOrNull(type);
}
private <T> T getBeanOrNull(Class<T> type) {
ApplicationContext context = getBuilder().getSharedObject(ApplicationContext.class); ApplicationContext context = getBuilder().getSharedObject(ApplicationContext.class);
if (context == null) { if (context == null) {
return null; return null;
} }
try { return context.getBeanProvider(type).getIfUnique();
return context.getBean(type);
}
catch (NoSuchBeanDefinitionException ex) {
return null;
}
} }
} }

12
config/src/main/java/org/springframework/security/config/annotation/web/configurers/RequestCacheConfigurer.java
View File

@ -1,5 +1,5 @@
/* /*
* Copyright 2002-2013 the original author or authors. * Copyright 2002-2024 the original author or authors.
* *
* Licensed under the Apache License, Version 2.0 (the "License"); * Licensed under the Apache License, Version 2.0 (the "License");
* you may not use this file except in compliance with the License. * you may not use this file except in compliance with the License.
@ -20,7 +20,6 @@ import java.util.ArrayList;
import java.util.Collections; import java.util.Collections;
import java.util.List; import java.util.List;
import org.springframework.beans.factory.NoSuchBeanDefinitionException;
import org.springframework.context.ApplicationContext; import org.springframework.context.ApplicationContext;
import org.springframework.http.MediaType; import org.springframework.http.MediaType;
import org.springframework.security.config.annotation.web.HttpSecurityBuilder; import org.springframework.security.config.annotation.web.HttpSecurityBuilder;
@ -67,6 +66,7 @@ import org.springframework.web.accept.HeaderContentNegotiationStrategy;
* </ul> * </ul>
* *
* @author Rob Winch * @author Rob Winch
* @author Ngoc Nhan
* @since 3.2 * @since 3.2
* @see RequestCache * @see RequestCache
*/ */
@ -134,12 +134,8 @@ public final class RequestCacheConfigurer<H extends HttpSecurityBuilder<H>>
if (context == null) { if (context == null) {
return null; return null;
} }
try {
return context.getBean(type); return context.getBeanProvider(type).getIfUnique();
}
catch (NoSuchBeanDefinitionException ex) {
return null;
}
} }
@SuppressWarnings("unchecked") @SuppressWarnings("unchecked")

12
config/src/main/java/org/springframework/security/config/annotation/web/configurers/ServletApiConfigurer.java
View File

@ -1,5 +1,5 @@
/* /*
* Copyright 2002-2022 the original author or authors. * Copyright 2002-2024 the original author or authors.
* *
* Licensed under the Apache License, Version 2.0 (the "License"); * Licensed under the Apache License, Version 2.0 (the "License");
* you may not use this file except in compliance with the License. * you may not use this file except in compliance with the License.
@ -56,6 +56,7 @@ import org.springframework.security.web.servletapi.SecurityContextHolderAwareReq
* </ul> * </ul>
* *
* @author Rob Winch * @author Rob Winch
* @author Ngoc Nhan
* @since 3.2 * @since 3.2
*/ */
public final class ServletApiConfigurer<H extends HttpSecurityBuilder<H>> public final class ServletApiConfigurer<H extends HttpSecurityBuilder<H>>
@ -92,12 +93,9 @@ public final class ServletApiConfigurer<H extends HttpSecurityBuilder<H>>
} }
ApplicationContext context = http.getSharedObject(ApplicationContext.class); ApplicationContext context = http.getSharedObject(ApplicationContext.class);
if (context != null) { if (context != null) {
String[] grantedAuthorityDefaultsBeanNames = context.getBeanNamesForType(GrantedAuthorityDefaults.class); context.getBeanProvider(GrantedAuthorityDefaults.class)
if (grantedAuthorityDefaultsBeanNames.length == 1) { .ifUnique((grantedAuthorityDefaults) -> this.securityContextRequestFilter
GrantedAuthorityDefaults grantedAuthorityDefaults = context .setRolePrefix(grantedAuthorityDefaults.getRolePrefix()));
.getBean(grantedAuthorityDefaultsBeanNames[0], GrantedAuthorityDefaults.class);
this.securityContextRequestFilter.setRolePrefix(grantedAuthorityDefaults.getRolePrefix());
}
this.securityContextRequestFilter.setSecurityContextHolderStrategy(getSecurityContextHolderStrategy()); this.securityContextRequestFilter.setSecurityContextHolderStrategy(getSecurityContextHolderStrategy());
} }
this.securityContextRequestFilter = postProcess(this.securityContextRequestFilter); this.securityContextRequestFilter = postProcess(this.securityContextRequestFilter);

12
config/src/main/java/org/springframework/security/config/annotation/web/configurers/SessionManagementConfigurer.java
View File

@ -1,5 +1,5 @@
/* /*
* Copyright 2002-2023 the original author or authors. * Copyright 2002-2024 the original author or authors.
* *
* Licensed under the Apache License, Version 2.0 (the "License"); * Licensed under the Apache License, Version 2.0 (the "License");
* you may not use this file except in compliance with the License. * you may not use this file except in compliance with the License.
@ -25,7 +25,6 @@ import java.util.Set;
import jakarta.servlet.http.HttpServletResponse; import jakarta.servlet.http.HttpServletResponse;
import jakarta.servlet.http.HttpSession; import jakarta.servlet.http.HttpSession;
import org.springframework.beans.factory.NoSuchBeanDefinitionException;
import org.springframework.context.ApplicationContext; import org.springframework.context.ApplicationContext;
import org.springframework.context.ApplicationListener; import org.springframework.context.ApplicationListener;
import org.springframework.context.event.GenericApplicationListenerAdapter; import org.springframework.context.event.GenericApplicationListenerAdapter;
@ -100,6 +99,7 @@ import org.springframework.util.CollectionUtils;
* *
* @author Rob Winch * @author Rob Winch
* @author Onur Kagan Ozcan * @author Onur Kagan Ozcan
* @author Ngoc Nhan
* @since 3.2 * @since 3.2
* @see SessionManagementFilter * @see SessionManagementFilter
* @see ConcurrentSessionFilter * @see ConcurrentSessionFilter
@ -630,12 +630,8 @@ public final class SessionManagementConfigurer<H extends HttpSecurityBuilder<H>>
if (context == null) { if (context == null) {
return null; return null;
} }
try {
return context.getBean(type); return context.getBeanProvider(type).getIfUnique();
}
catch (NoSuchBeanDefinitionException ex) {
return null;
}
} }
/** /**

15
config/src/main/java/org/springframework/security/config/annotation/web/configurers/X509Configurer.java
View File

@ -1,5 +1,5 @@
/* /*
* Copyright 2002-2023 the original author or authors. * Copyright 2002-2024 the original author or authors.
* *
* Licensed under the Apache License, Version 2.0 (the "License"); * Licensed under the Apache License, Version 2.0 (the "License");
* you may not use this file except in compliance with the License. * you may not use this file except in compliance with the License.
@ -18,7 +18,6 @@ package org.springframework.security.config.annotation.web.configurers;
import jakarta.servlet.http.HttpServletRequest; import jakarta.servlet.http.HttpServletRequest;
import org.springframework.beans.factory.NoSuchBeanDefinitionException;
import org.springframework.context.ApplicationContext; import org.springframework.context.ApplicationContext;
import org.springframework.security.authentication.AuthenticationDetailsSource; import org.springframework.security.authentication.AuthenticationDetailsSource;
import org.springframework.security.authentication.AuthenticationManager; import org.springframework.security.authentication.AuthenticationManager;
@ -74,6 +73,7 @@ import org.springframework.security.web.context.RequestAttributeSecurityContextR
* </ul> * </ul>
* *
* @author Rob Winch * @author Rob Winch
* @author Ngoc Nhan
* @since 3.2 * @since 3.2
*/ */
public final class X509Configurer<H extends HttpSecurityBuilder<H>> public final class X509Configurer<H extends HttpSecurityBuilder<H>>
@ -214,20 +214,11 @@ public final class X509Configurer<H extends HttpSecurityBuilder<H>>
if (shared != null) { if (shared != null) {
return shared; return shared;
} }
return getBeanOrNull(type);
}
private <T> T getBeanOrNull(Class<T> type) {
ApplicationContext context = getBuilder().getSharedObject(ApplicationContext.class); ApplicationContext context = getBuilder().getSharedObject(ApplicationContext.class);
if (context == null) { if (context == null) {
return null; return null;
} }
try { return context.getBeanProvider(type).getIfUnique();
return context.getBean(type);
}
catch (NoSuchBeanDefinitionException ex) {
return null;
}
} }
} }

10
config/src/main/java/org/springframework/security/config/annotation/web/configurers/oauth2/client/OAuth2ClientConfigurer.java
View File

@ -86,6 +86,7 @@ import org.springframework.util.Assert;
* *
* @author Joe Grandja * @author Joe Grandja
* @author Parikshit Dutta * @author Parikshit Dutta
* @author Ngoc Nhan
* @since 5.1 * @since 5.1
* @see OAuth2AuthorizationRequestRedirectFilter * @see OAuth2AuthorizationRequestRedirectFilter
* @see OAuth2AuthorizationCodeGrantFilter * @see OAuth2AuthorizationCodeGrantFilter
@ -320,14 +321,11 @@ public final class OAuth2ClientConfigurer<B extends HttpSecurityBuilder<B>>
@SuppressWarnings("unchecked") @SuppressWarnings("unchecked")
private <T> T getBeanOrNull(ResolvableType type) { private <T> T getBeanOrNull(ResolvableType type) {
ApplicationContext context = getBuilder().getSharedObject(ApplicationContext.class); ApplicationContext context = getBuilder().getSharedObject(ApplicationContext.class);
if (context != null) { if (context == null) {
String[] names = context.getBeanNamesForType(type);
if (names.length == 1) {
return (T) context.getBean(names[0]);
}
}
return null; return null;
} }
return (T) context.getBeanProvider(type).getIfUnique();
}
} }

17
config/src/main/java/org/springframework/security/config/annotation/web/configurers/oauth2/client/OAuth2LoginConfigurer.java
View File

@ -149,6 +149,7 @@ import org.springframework.util.ReflectionUtils;
* *
* @author Joe Grandja * @author Joe Grandja
* @author Kazuki Shimizu * @author Kazuki Shimizu
* @author Ngoc Nhan
* @since 5.0 * @since 5.0
* @see HttpSecurity#oauth2Login() * @see HttpSecurity#oauth2Login()
* @see OAuth2AuthorizationRequestRedirectFilter * @see OAuth2AuthorizationRequestRedirectFilter
@ -446,12 +447,10 @@ public final class OAuth2LoginConfigurer<B extends HttpSecurityBuilder<B>>
if (names.length > 1) { if (names.length > 1) {
throw new NoUniqueBeanDefinitionException(type, names); throw new NoUniqueBeanDefinitionException(type, names);
} }
if (names.length == 1) {
return (JwtDecoderFactory<ClientRegistration>) this.getBuilder() return (JwtDecoderFactory<ClientRegistration>) this.getBuilder()
.getSharedObject(ApplicationContext.class) .getSharedObject(ApplicationContext.class)
.getBean(names[0]); .getBeanProvider(type)
} .getIfUnique();
return null;
} }
private GrantedAuthoritiesMapper getGrantedAuthoritiesMapper() { private GrantedAuthoritiesMapper getGrantedAuthoritiesMapper() {
@ -503,16 +502,14 @@ public final class OAuth2LoginConfigurer<B extends HttpSecurityBuilder<B>>
return (bean != null) ? bean : new DefaultOAuth2UserService(); return (bean != null) ? bean : new DefaultOAuth2UserService();
} }
@SuppressWarnings("unchecked")
private <T> T getBeanOrNull(ResolvableType type) { private <T> T getBeanOrNull(ResolvableType type) {
ApplicationContext context = getBuilder().getSharedObject(ApplicationContext.class); ApplicationContext context = getBuilder().getSharedObject(ApplicationContext.class);
if (context != null) { if (context == null) {
String[] names = context.getBeanNamesForType(type);
if (names.length == 1) {
return (T) context.getBean(names[0]);
}
}
return null; return null;
} }
return (T) context.getBeanProvider(type).getIfUnique();
}
private void initDefaultLoginFilter(B http) { private void initDefaultLoginFilter(B http) {
DefaultLoginPageGeneratingFilter loginPageGeneratingFilter = http DefaultLoginPageGeneratingFilter loginPageGeneratingFilter = http

11
config/src/main/java/org/springframework/security/config/annotation/web/configurers/oauth2/client/OidcLogoutConfigurer.java
View File

@ -65,6 +65,7 @@ import org.springframework.util.Assert;
* </ul> * </ul>
* *
* @author Josh Cummings * @author Josh Cummings
* @author Ngoc Nhan
* @since 6.2 * @since 6.2
* @see HttpSecurity#oidcLogout() * @see HttpSecurity#oidcLogout()
* @see OidcBackChannelLogoutFilter * @see OidcBackChannelLogoutFilter
@ -283,16 +284,14 @@ public final class OidcLogoutConfigurer<B extends HttpSecurityBuilder<B>>
http.addFilterBefore(filter, CsrfFilter.class); http.addFilterBefore(filter, CsrfFilter.class);
} }
@SuppressWarnings("unchecked")
private <T> T getBeanOrNull(Class<?> clazz) { private <T> T getBeanOrNull(Class<?> clazz) {
ApplicationContext context = getBuilder().getSharedObject(ApplicationContext.class); ApplicationContext context = getBuilder().getSharedObject(ApplicationContext.class);
if (context != null) { if (context == null) {
String[] names = context.getBeanNamesForType(clazz);
if (names.length == 1) {
return (T) context.getBean(names[0]);
}
}
return null; return null;
} }
return (T) context.getBeanProvider(clazz).getIfUnique();
}
private static final class EitherLogoutHandler implements LogoutHandler { private static final class EitherLogoutHandler implements LogoutHandler {

9
config/src/main/java/org/springframework/security/config/annotation/web/configurers/ott/OneTimeTokenLoginConfigurer.java
View File

@ -21,7 +21,6 @@ import java.util.Map;
import jakarta.servlet.http.HttpServletRequest; import jakarta.servlet.http.HttpServletRequest;
import org.springframework.beans.factory.NoSuchBeanDefinitionException;
import org.springframework.context.ApplicationContext; import org.springframework.context.ApplicationContext;
import org.springframework.http.HttpMethod; import org.springframework.http.HttpMethod;
import org.springframework.security.authentication.AuthenticationManager; import org.springframework.security.authentication.AuthenticationManager;
@ -321,12 +320,8 @@ public final class OneTimeTokenLoginConfigurer<H extends HttpSecurityBuilder<H>>
if (context == null) { if (context == null) {
return null; return null;
} }
try {
return context.getBean(clazz); return context.getBeanProvider(clazz).getIfUnique();
}
catch (NoSuchBeanDefinitionException ex) {
return null;
}
} }
private Map<String, String> hiddenInputs(HttpServletRequest request) { private Map<String, String> hiddenInputs(HttpServletRequest request) {

10
config/src/main/java/org/springframework/security/config/annotation/web/configurers/saml2/Saml2LoginConfigurer.java
View File

@ -1,5 +1,5 @@
/* /*
* Copyright 2002-2022 the original author or authors. * Copyright 2002-2024 the original author or authors.
* *
* Licensed under the Apache License, Version 2.0 (the "License"); * Licensed under the Apache License, Version 2.0 (the "License");
* you may not use this file except in compliance with the License. * you may not use this file except in compliance with the License.
@ -24,7 +24,6 @@ import java.util.Map;
import jakarta.servlet.http.HttpServletRequest; import jakarta.servlet.http.HttpServletRequest;
import org.opensaml.core.Version; import org.opensaml.core.Version;
import org.springframework.beans.factory.NoSuchBeanDefinitionException;
import org.springframework.context.ApplicationContext; import org.springframework.context.ApplicationContext;
import org.springframework.security.authentication.AuthenticationManager; import org.springframework.security.authentication.AuthenticationManager;
import org.springframework.security.authentication.AuthenticationProvider; import org.springframework.security.authentication.AuthenticationProvider;
@ -501,12 +500,7 @@ public final class Saml2LoginConfigurer<B extends HttpSecurityBuilder<B>>
if (context == null) { if (context == null) {
return null; return null;
} }
try { return context.getBeanProvider(clazz).getIfUnique();
return context.getBean(clazz);
}
catch (NoSuchBeanDefinitionException ex) {
return null;
}
} }
private <C> void setSharedObject(B http, Class<C> clazz, C object) { private <C> void setSharedObject(B http, Class<C> clazz, C object) {

6
config/src/main/java/org/springframework/security/config/annotation/web/configurers/saml2/Saml2LogoutConfigurer.java
View File

@ -107,6 +107,7 @@ import org.springframework.security.web.util.matcher.RequestMatcher;
* Uses {@link CsrfTokenRepository} to add the {@link CsrfLogoutHandler}. * Uses {@link CsrfTokenRepository} to add the {@link CsrfLogoutHandler}.
* *
* @author Josh Cummings * @author Josh Cummings
* @author Ngoc Nhan
* @since 5.6 * @since 5.6
* @see Saml2LogoutConfigurer * @see Saml2LogoutConfigurer
*/ */
@ -336,10 +337,7 @@ public final class Saml2LogoutConfigurer<H extends HttpSecurityBuilder<H>>
if (this.context == null) { if (this.context == null) {
return null; return null;
} }
if (this.context.getBeanNamesForType(clazz).length == 0) { return this.context.getBeanProvider(clazz).getIfAvailable();
return null;
}
return this.context.getBean(clazz);
} }
/** /**

7
config/src/main/java/org/springframework/security/config/annotation/web/configurers/saml2/Saml2MetadataConfigurer.java
View File

@ -1,5 +1,5 @@
/* /*
* Copyright 2002-2023 the original author or authors. * Copyright 2002-2024 the original author or authors.
* *
* Licensed under the Apache License, Version 2.0 (the "License"); * Licensed under the Apache License, Version 2.0 (the "License");
* you may not use this file except in compliance with the License. * you may not use this file except in compliance with the License.
@ -174,10 +174,7 @@ public class Saml2MetadataConfigurer<H extends HttpSecurityBuilder<H>>
if (this.context == null) { if (this.context == null) {
return null; return null;
} }
if (this.context.getBeanNamesForType(clazz).length == 0) { return this.context.getBeanProvider(clazz).getIfAvailable();
return null;
}
return this.context.getBean(clazz);
} }
} }

16
config/src/main/java/org/springframework/security/config/authentication/AuthenticationManagerFactoryBean.java
View File

@ -1,5 +1,5 @@
/* /*
* Copyright 2002-2018 the original author or authors. * Copyright 2002-2024 the original author or authors.
* *
* Licensed under the Apache License, Version 2.0 (the "License"); * Licensed under the Apache License, Version 2.0 (the "License");
* you may not use this file except in compliance with the License. * you may not use this file except in compliance with the License.
@ -40,6 +40,7 @@ import org.springframework.security.crypto.password.PasswordEncoder;
* has forgotten to declare the &lt;authentication-manager&gt; element. * has forgotten to declare the &lt;authentication-manager&gt; element.
* *
* @author Luke Taylor * @author Luke Taylor
* @author Ngoc Nhan
* @since 3.0 * @since 3.0
*/ */
public class AuthenticationManagerFactoryBean implements FactoryBean<AuthenticationManager>, BeanFactoryAware { public class AuthenticationManagerFactoryBean implements FactoryBean<AuthenticationManager>, BeanFactoryAware {
@ -61,13 +62,13 @@ public class AuthenticationManagerFactoryBean implements FactoryBean<Authenticat
if (!BeanIds.AUTHENTICATION_MANAGER.equals(ex.getBeanName())) { if (!BeanIds.AUTHENTICATION_MANAGER.equals(ex.getBeanName())) {
throw ex; throw ex;
} }
UserDetailsService uds = getBeanOrNull(UserDetailsService.class); UserDetailsService uds = this.bf.getBeanProvider(UserDetailsService.class).getIfUnique();
if (uds == null) { if (uds == null) {
throw new NoSuchBeanDefinitionException(BeanIds.AUTHENTICATION_MANAGER, MISSING_BEAN_ERROR_MESSAGE); throw new NoSuchBeanDefinitionException(BeanIds.AUTHENTICATION_MANAGER, MISSING_BEAN_ERROR_MESSAGE);
} }
DaoAuthenticationProvider provider = new DaoAuthenticationProvider(); DaoAuthenticationProvider provider = new DaoAuthenticationProvider();
provider.setUserDetailsService(uds); provider.setUserDetailsService(uds);
PasswordEncoder passwordEncoder = getBeanOrNull(PasswordEncoder.class); PasswordEncoder passwordEncoder = this.bf.getBeanProvider(PasswordEncoder.class).getIfUnique();
if (passwordEncoder != null) { if (passwordEncoder != null) {
provider.setPasswordEncoder(passwordEncoder); provider.setPasswordEncoder(passwordEncoder);
} }
@ -99,13 +100,4 @@ public class AuthenticationManagerFactoryBean implements FactoryBean<Authenticat
this.observationRegistry = observationRegistry; this.observationRegistry = observationRegistry;
} }
private <T> T getBeanOrNull(Class<T> type) {
try {
return this.bf.getBean(type);
}
catch (NoSuchBeanDefinitionException noUds) {
return null;
}
}
} }

12
config/src/main/java/org/springframework/security/config/http/GrantedAuthorityDefaultsParserUtils.java
View File

@ -1,5 +1,5 @@
/* /*
* Copyright 2012-2018 the original author or authors. * Copyright 2012-2024 the original author or authors.
* *
* Licensed under the Apache License, Version 2.0 (the "License"); * Licensed under the Apache License, Version 2.0 (the "License");
* you may not use this file except in compliance with the License. * you may not use this file except in compliance with the License.
@ -25,6 +25,7 @@ import org.springframework.security.config.core.GrantedAuthorityDefaults;
/** /**
* @author Rob Winch * @author Rob Winch
* @author Ngoc Nhan
* @since 4.2 * @since 4.2
*/ */
final class GrantedAuthorityDefaultsParserUtils { final class GrantedAuthorityDefaultsParserUtils {
@ -49,13 +50,8 @@ final class GrantedAuthorityDefaultsParserUtils {
@Override @Override
public final void setApplicationContext(ApplicationContext applicationContext) throws BeansException { public final void setApplicationContext(ApplicationContext applicationContext) throws BeansException {
String[] grantedAuthorityDefaultsBeanNames = applicationContext applicationContext.getBeanProvider(GrantedAuthorityDefaults.class)
.getBeanNamesForType(GrantedAuthorityDefaults.class); .ifUnique((grantedAuthorityDefaults) -> this.rolePrefix = grantedAuthorityDefaults.getRolePrefix());
if (grantedAuthorityDefaultsBeanNames.length == 1) {
GrantedAuthorityDefaults grantedAuthorityDefaults = applicationContext
.getBean(grantedAuthorityDefaultsBeanNames[0], GrantedAuthorityDefaults.class);
this.rolePrefix = grantedAuthorityDefaults.getRolePrefix();
}
} }
abstract Object getBean(); abstract Object getBean();

12
config/src/main/java/org/springframework/security/config/method/GlobalMethodSecurityBeanDefinitionParser.java
View File

@ -1,5 +1,5 @@
/* /*
* Copyright 2002-2022 the original author or authors. * Copyright 2002-2024 the original author or authors.
* *
* Licensed under the Apache License, Version 2.0 (the "License"); * Licensed under the Apache License, Version 2.0 (the "License");
* you may not use this file except in compliance with the License. * you may not use this file except in compliance with the License.
@ -88,6 +88,7 @@ import org.springframework.util.xml.DomUtils;
* @author Ben Alex * @author Ben Alex
* @author Luke Taylor * @author Luke Taylor
* @author Rob Winch * @author Rob Winch
* @author Ngoc Nhan
* @since 2.0 * @since 2.0
* @deprecated Use {@link MethodSecurityBeanDefinitionParser} instead * @deprecated Use {@link MethodSecurityBeanDefinitionParser} instead
*/ */
@ -483,13 +484,8 @@ public class GlobalMethodSecurityBeanDefinitionParser implements BeanDefinitionP
@Override @Override
public final void setApplicationContext(ApplicationContext applicationContext) throws BeansException { public final void setApplicationContext(ApplicationContext applicationContext) throws BeansException {
String[] grantedAuthorityDefaultsBeanNames = applicationContext applicationContext.getBeanProvider(GrantedAuthorityDefaults.class)
.getBeanNamesForType(GrantedAuthorityDefaults.class); .ifUnique((grantedAuthorityDefaults) -> this.rolePrefix = grantedAuthorityDefaults.getRolePrefix());
if (grantedAuthorityDefaultsBeanNames.length == 1) {
GrantedAuthorityDefaults grantedAuthorityDefaults = applicationContext
.getBean(grantedAuthorityDefaultsBeanNames[0], GrantedAuthorityDefaults.class);
this.rolePrefix = grantedAuthorityDefaults.getRolePrefix();
}
} }
} }

23
config/src/main/java/org/springframework/security/config/method/MethodSecurityBeanDefinitionParser.java
View File

@ -1,5 +1,5 @@
/* /*
* Copyright 2002-2022 the original author or authors. * Copyright 2002-2024 the original author or authors.
* *
* Licensed under the Apache License, Version 2.0 (the "License"); * Licensed under the Apache License, Version 2.0 (the "License");
* you may not use this file except in compliance with the License. * you may not use this file except in compliance with the License.
@ -67,6 +67,7 @@ import org.springframework.util.xml.DomUtils;
* Processes the top-level "method-security" element. * Processes the top-level "method-security" element.
* *
* @author Josh Cummings * @author Josh Cummings
* @author Ngoc Nhan
* @since 5.6 * @since 5.6
*/ */
public class MethodSecurityBeanDefinitionParser implements BeanDefinitionParser { public class MethodSecurityBeanDefinitionParser implements BeanDefinitionParser {
@ -307,13 +308,9 @@ public class MethodSecurityBeanDefinitionParser implements BeanDefinitionParser
@Override @Override
public void setApplicationContext(ApplicationContext applicationContext) throws BeansException { public void setApplicationContext(ApplicationContext applicationContext) throws BeansException {
String[] grantedAuthorityDefaultsBeanNames = applicationContext applicationContext.getBeanProvider(GrantedAuthorityDefaults.class)
.getBeanNamesForType(GrantedAuthorityDefaults.class); .ifUnique((grantedAuthorityDefaults) -> this.expressionHandler
if (grantedAuthorityDefaultsBeanNames.length == 1) { .setDefaultRolePrefix(grantedAuthorityDefaults.getRolePrefix()));
GrantedAuthorityDefaults grantedAuthorityDefaults = applicationContext
.getBean(grantedAuthorityDefaultsBeanNames[0], GrantedAuthorityDefaults.class);
this.expressionHandler.setDefaultRolePrefix(grantedAuthorityDefaults.getRolePrefix());
}
} }
} }
@ -347,13 +344,9 @@ public class MethodSecurityBeanDefinitionParser implements BeanDefinitionParser
@Override @Override
public void setApplicationContext(ApplicationContext applicationContext) throws BeansException { public void setApplicationContext(ApplicationContext applicationContext) throws BeansException {
String[] grantedAuthorityDefaultsBeanNames = applicationContext applicationContext.getBeanProvider(GrantedAuthorityDefaults.class)
.getBeanNamesForType(GrantedAuthorityDefaults.class); .ifUnique((grantedAuthorityDefaults) -> this.manager
if (grantedAuthorityDefaultsBeanNames.length == 1) { .setRolePrefix(grantedAuthorityDefaults.getRolePrefix()));
GrantedAuthorityDefaults grantedAuthorityDefaults = applicationContext
.getBean(grantedAuthorityDefaultsBeanNames[0], GrantedAuthorityDefaults.class);
this.manager.setRolePrefix(grantedAuthorityDefaults.getRolePrefix());
}
} }
public void setSecurityContextHolderStrategy(SecurityContextHolderStrategy securityContextHolderStrategy) { public void setSecurityContextHolderStrategy(SecurityContextHolderStrategy securityContextHolderStrategy) {

12
config/src/main/java/org/springframework/security/config/web/server/ServerHttpSecurity.java
View File

@ -1734,26 +1734,22 @@ public class ServerHttpSecurity {
} }
private <T> T getBeanOrDefault(Class<T> beanClass, T defaultInstance) { private <T> T getBeanOrDefault(Class<T> beanClass, T defaultInstance) {
T bean = getBeanOrNull(beanClass); if (this.context == null) {
if (bean == null) {
return defaultInstance; return defaultInstance;
} }
return bean; return this.context.getBeanProvider(beanClass).getIfUnique(() -> defaultInstance);
} }
private <T> T getBeanOrNull(Class<T> beanClass) { private <T> T getBeanOrNull(Class<T> beanClass) {
return getBeanOrNull(ResolvableType.forClass(beanClass)); return getBeanOrNull(ResolvableType.forClass(beanClass));
} }
@SuppressWarnings("unchecked")
private <T> T getBeanOrNull(ResolvableType type) { private <T> T getBeanOrNull(ResolvableType type) {
if (this.context == null) { if (this.context == null) {
return null; return null;
} }
String[] names = this.context.getBeanNamesForType(type); return (T) this.context.getBeanProvider(type).getIfUnique();
if (names.length == 1) {
return (T) this.context.getBean(names[0]);
}
return null;
} }
private <T> T getBeanOrNull(String beanName, Class<T> requiredClass) { private <T> T getBeanOrNull(String beanName, Class<T> requiredClass) {