Register SecurityFilterChain instead of WebSecurityConfigurerAdapter

Closes gh-163
This commit is contained in:
Joe Grandja
2020-11-19 08:29:34 -05:00
parent 9f246fc304
commit d97235d0bb
6 changed files with 121 additions and 90 deletions

View File

@@ -18,22 +18,29 @@ package org.springframework.security.config.annotation.web.configuration;
import org.junit.Test;
import org.springframework.core.Ordered;
import org.springframework.core.annotation.OrderUtils;
import org.springframework.security.config.annotation.web.builders.HttpSecurity;
import org.springframework.util.ClassUtils;
import java.lang.reflect.Method;
import static org.assertj.core.api.Assertions.assertThat;
/**
* Tests for {@link OAuth2AuthorizationServerSecurity}.
* Tests for {@link OAuth2AuthorizationServerConfiguration}.
*
* @author Joe Grandja
*/
public class OAuth2AuthorizationServerSecurityTests {
public class OAuth2AuthorizationServerConfigurationTests {
@Test
public void assertOrderHighestPrecedence() {
Integer authorizationServerSecurityOrder = OrderUtils.getOrder(OAuth2AuthorizationServerSecurity.class);
Integer defaultSecurityOrder = OrderUtils.getOrder(WebSecurityConfigurerAdapter.class);
assertThat(authorizationServerSecurityOrder).isNotEqualTo(defaultSecurityOrder);
assertThat(authorizationServerSecurityOrder).isEqualTo(Ordered.HIGHEST_PRECEDENCE);
Method authorizationServerSecurityFilterChainMethod =
ClassUtils.getMethod(
OAuth2AuthorizationServerConfiguration.class,
"authorizationServerSecurityFilterChain",
HttpSecurity.class);
Integer order = OrderUtils.getOrder(authorizationServerSecurityFilterChainMethod);
assertThat(order).isEqualTo(Ordered.HIGHEST_PRECEDENCE);
}
}