Rework security autoconfiguration

This commit combines security autoconfigurations for
management endpoints and the rest of the application. By default,
if Spring Security is on the classpath, it turns on @EnableWebSecurity.
In the presence of another WebSecurityConfigurerAdapter this backs off
completely. A default AuthenticationManager is also provided with a user
and generated password. This can be turned off by specifying a bean of
type AuthenticationManager, AuthenticationProvider or UserDetailsService.

Closes gh-7958

spring-boot-samples/spring-boot-sample-secure/src/main/java/sample/secure/SampleSecureApplication.java

@@ -20,11 +20,15 @@ import org.springframework.beans.factory.annotation.Autowired;
 import org.springframework.boot.CommandLineRunner;
 import org.springframework.boot.SpringApplication;
 import org.springframework.boot.autoconfigure.EnableAutoConfiguration;
+import org.springframework.context.annotation.Bean;
 import org.springframework.context.annotation.ComponentScan;
 import org.springframework.security.authentication.UsernamePasswordAuthenticationToken;
 import org.springframework.security.config.annotation.method.configuration.EnableGlobalMethodSecurity;
 import org.springframework.security.core.authority.AuthorityUtils;
 import org.springframework.security.core.context.SecurityContextHolder;
+import org.springframework.security.core.userdetails.User;
+import org.springframework.security.core.userdetails.UserDetailsService;
+import org.springframework.security.provisioning.InMemoryUserDetailsManager;
 
 @EnableAutoConfiguration
 @ComponentScan
@@ -34,6 +38,13 @@ public class SampleSecureApplication implements CommandLineRunner {
 	@Autowired
 	private SampleService service;
 
+	@Bean
+	public UserDetailsService userDetailsService() throws Exception {
+		InMemoryUserDetailsManager manager = new InMemoryUserDetailsManager();
+		manager.createUser(User.withUsername("user").password("password").roles("USER").build());
+		return manager;
+	}
+
 	@Override
 	public void run(String... args) throws Exception {
 		SecurityContextHolder.getContext()

spring-boot-samples/spring-boot-sample-secure/src/test/java/sample/secure/SampleSecureApplicationTests.java

@@ -20,15 +20,10 @@ import org.junit.After;
 import org.junit.Before;
 import org.junit.Test;
 import org.junit.runner.RunWith;
-import sample.secure.SampleSecureApplicationTests.TestConfiguration;
 
 import org.springframework.beans.factory.annotation.Autowired;
 import org.springframework.boot.test.context.SpringBootTest;
-import org.springframework.context.ApplicationContext;
-import org.springframework.context.annotation.Configuration;
-import org.springframework.context.annotation.PropertySource;
 import org.springframework.security.access.AccessDeniedException;
-import org.springframework.security.authentication.AuthenticationManager;
 import org.springframework.security.authentication.UsernamePasswordAuthenticationToken;
 import org.springframework.security.core.Authentication;
 import org.springframework.security.core.AuthenticationException;
@@ -43,23 +38,17 @@ import static org.assertj.core.api.Assertions.assertThat;
  * @author Dave Syer
  */
 @RunWith(SpringRunner.class)
-@SpringBootTest(classes = { SampleSecureApplication.class, TestConfiguration.class })
+@SpringBootTest(classes = {SampleSecureApplication.class})
 public class SampleSecureApplicationTests {
 
 	@Autowired
 	private SampleService service;
 
-	@Autowired
-	private ApplicationContext context;
-
 	private Authentication authentication;
 
 	@Before
 	public void init() {
-		AuthenticationManager authenticationManager = this.context
-				.getBean(AuthenticationManager.class);
-		this.authentication = authenticationManager.authenticate(
-				new UsernamePasswordAuthenticationToken("user", "password"));
+		this.authentication = new UsernamePasswordAuthenticationToken("user", "password");
 	}
 
 	@After
@@ -90,9 +79,4 @@ public class SampleSecureApplicationTests {
 		assertThat("Goodbye World").isEqualTo(this.service.denied());
 	}
 
-	@PropertySource("classpath:test.properties")
-	@Configuration
-	protected static class TestConfiguration {
-	}
-
 }

spring-boot-samples/spring-boot-sample-secure/src/test/resources/test.properties

@@ -1 +0,0 @@
-security.user.password=password