UserDetailsRepositoryReactiveAuthenticationManager uses DelegatingPasswordEncoder

This means passwords will be encoded with BCrypt by default

Issue: gh-2775

config/src/test/java/org/springframework/security/config/annotation/web/reactive/EnableWebFluxSecurityTests.java

@@ -20,12 +20,15 @@ import org.junit.Rule;
 import org.junit.Test;
 import org.springframework.beans.factory.annotation.Autowired;
 import org.springframework.context.annotation.Bean;
+import org.springframework.context.annotation.Import;
+import org.springframework.context.annotation.ImportResource;
 import org.springframework.core.Ordered;
 import org.springframework.core.annotation.Order;
 import org.springframework.core.io.buffer.DataBuffer;
 import org.springframework.core.io.buffer.DefaultDataBufferFactory;
 import org.springframework.security.authentication.TestingAuthenticationToken;
 import org.springframework.security.config.test.SpringTestRule;
+import org.springframework.security.config.users.ReactiveAuthenticationTestConfiguration;
 import org.springframework.security.config.web.server.ServerHttpSecurity;
 import org.springframework.security.core.Authentication;
 import org.springframework.security.core.userdetails.MapReactiveUserDetailsService;
@@ -141,15 +144,8 @@ public class EnableWebFluxSecurityTests {
 	}
 
 	@EnableWebFluxSecurity
+	@Import(ReactiveAuthenticationTestConfiguration.class)
 	static class Config {
-		@Bean
-		public ReactiveUserDetailsService userDetailsRepository() {
-			return new MapReactiveUserDetailsService(User.withUsername("user")
-				.password("password")
-				.roles("USER")
-				.build()
-			);
-		}
 	}
 
 	@Test
@@ -236,22 +232,21 @@ public class EnableWebFluxSecurityTests {
 	}
 
 	@EnableWebFluxSecurity
+	@Import(ReactiveAuthenticationTestConfiguration.class)
 	static class MultiSecurityHttpConfig {
-		@Order(Ordered.HIGHEST_PRECEDENCE) @Bean public SecurityWebFilterChain apiHttpSecurity(
+		@Order(Ordered.HIGHEST_PRECEDENCE)
+		@Bean
+		public SecurityWebFilterChain apiHttpSecurity(
 			ServerHttpSecurity http) {
 			http.securityMatcher(new PathPatternParserServerWebExchangeMatcher("/api/**"))
 				.authorizeExchange().anyExchange().denyAll();
 			return http.build();
 		}
 
-		@Bean public SecurityWebFilterChain httpSecurity(ServerHttpSecurity http) {
+		@Bean
+		public SecurityWebFilterChain httpSecurity(ServerHttpSecurity http) {
 			return http.build();
 		}
-
-		@Bean public ReactiveUserDetailsService userDetailsRepository() {
-			return new MapReactiveUserDetailsService(
-				User.withUsername("user").password("password").roles("USER").build());
-		}
 	}
 
 	private static DataBuffer toDataBuffer(String body) {

config/src/test/java/org/springframework/security/config/annotation/web/reactive/ServerHttpSecurityConfigurationBuilder.java

@@ -18,25 +18,24 @@ package org.springframework.security.config.annotation.web.reactive;
 
 import org.springframework.security.authentication.ReactiveAuthenticationManager;
 import org.springframework.security.authentication.UserDetailsRepositoryReactiveAuthenticationManager;
+import org.springframework.security.config.users.ReactiveAuthenticationTestConfiguration;
 import org.springframework.security.config.web.server.ServerHttpSecurity;
-import org.springframework.security.core.userdetails.MapReactiveUserDetailsService;
-import org.springframework.security.core.userdetails.User;
-import org.springframework.security.core.userdetails.UserDetails;
+import org.springframework.security.core.userdetails.ReactiveUserDetailsService;
 
 /**
  * @author Rob Winch
  * @since 5.0
  */
 public class ServerHttpSecurityConfigurationBuilder {
-	public static final UserDetails USER = User.withUsername("user").password("password").roles("USER").build();
-	public static final UserDetails ADMIN = User.withUsername("admin").password("password").roles("USER","ADMIN").build();
-
 	public static ServerHttpSecurity http() {
 		return new ServerHttpSecurityConfiguration().httpSecurity();
 	}
 
 	public static ServerHttpSecurity httpWithDefaultAuthentication() {
-		ReactiveAuthenticationManager authenticationManager = new UserDetailsRepositoryReactiveAuthenticationManager(new MapReactiveUserDetailsService(USER,ADMIN));
+		ReactiveUserDetailsService reactiveUserDetailsService = ReactiveAuthenticationTestConfiguration
+			.userDetailsRepository();
+		ReactiveAuthenticationManager authenticationManager = new UserDetailsRepositoryReactiveAuthenticationManager(
+			reactiveUserDetailsService);
 		return http()
 			.authenticationManager(authenticationManager);
 	}

config/src/test/java/org/springframework/security/config/users/ReactiveAuthenticationTestConfiguration.java

@@ -0,0 +1,37 @@
+/*
+ * Copyright 2002-2017 the original author or authors.
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *      http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+
+package org.springframework.security.config.users;
+
+import org.junit.Test;
+import org.springframework.context.annotation.Bean;
+import org.springframework.context.annotation.Configuration;
+import org.springframework.security.core.userdetails.MapReactiveUserDetailsService;
+import org.springframework.security.core.userdetails.PasswordEncodedUser;
+import org.springframework.security.core.userdetails.ReactiveUserDetailsService;
+import org.springframework.security.core.userdetails.User;
+
+/**
+ * @author Rob Winch
+ * @since 5.0
+ */
+@Configuration
+public class ReactiveAuthenticationTestConfiguration {
+	@Bean
+	public static ReactiveUserDetailsService userDetailsRepository() {
+		return new MapReactiveUserDetailsService(PasswordEncodedUser.user(), PasswordEncodedUser.admin());
+	}
+}