Change EnableReactiveMethodSecurity Defaults

Closes gh-12506
spring-projects · Jan 10, 2023 · 5b6b3d5 · 5b6b3d5
1 parent d1fc789
commit 5b6b3d5
Show file tree

Hide file tree

Showing 3 changed files with 8 additions and 8 deletions.
diff --git a/...amework/security/config/annotation/method/configuration/EnableReactiveMethodSecurity.java b/...amework/security/config/annotation/method/configuration/EnableReactiveMethodSecurity.java
@@ -1,5 +1,5 @@
 /*
- * Copyright 2002-2017 the original author or authors.
+ * Copyright 2002-2023 the original author or authors.
  *
  * Licensed under the Apache License, Version 2.0 (the "License");
  * you may not use this file except in compliance with the License.
@@ -73,6 +73,6 @@
 	 * used.
 	 * @since 5.8
 	 */
-	boolean useAuthorizationManager() default false;
+	boolean useAuthorizationManager() default true;
 
 }
diff --git a/...rk/security/config/annotation/method/configuration/EnableReactiveMethodSecurityTests.java b/...rk/security/config/annotation/method/configuration/EnableReactiveMethodSecurityTests.java
@@ -1,5 +1,5 @@
 /*
- * Copyright 2002-2021 the original author or authors.
+ * Copyright 2002-2023 the original author or authors.
  *
  * Licensed under the Apache License, Version 2.0 (the "License");
  * you may not use this file except in compliance with the License.
@@ -78,8 +78,7 @@ public void notPublisherPreAuthorizeFindByIdThenThrowsIllegalStateException() {
 				.withMessage("The returnType class java.lang.String on public abstract java.lang.String "
 						+ "org.springframework.security.config.annotation.method.configuration.ReactiveMessageService"
 						+ ".notPublisherPreAuthorizeFindById(long) must return an instance of org.reactivestreams"
-						+ ".Publisher (i.e. Mono / Flux) or the function must be a Kotlin coroutine "
-						+ "function in order to support Reactor Context");
+						+ ".Publisher (for example, a Mono or Flux) in order to support Reactor Context");
 	}
 
 	@Test

diff --git a/...otlinEnableReactiveMethodSecurityTests.kt → ...hodSecurityNoAuthorizationManagerTests.kt b/...otlinEnableReactiveMethodSecurityTests.kt → ...hodSecurityNoAuthorizationManagerTests.kt
@@ -1,5 +1,5 @@
 /*
- * Copyright 2002-2021 the original author or authors.
+ * Copyright 2002-2023 the original author or authors.
  *
  * Licensed under the Apache License, Version 2.0 (the "License");
  * you may not use this file except in compliance with the License.
@@ -38,7 +38,8 @@ import org.springframework.test.context.junit.jupiter.SpringExtension
 
 @ExtendWith(SpringExtension::class)
 @ContextConfiguration
-class KotlinEnableReactiveMethodSecurityTests {
+// no authorization manager due to https://github.com/spring-projects/spring-security/issues/12080
+class KotlinEnableReactiveMethodSecurityNoAuthorizationManagerTests {
 
     private lateinit var delegate: KotlinReactiveMessageService
 
@@ -211,7 +212,7 @@ class KotlinEnableReactiveMethodSecurityTests {
     }
 
     @Configuration
-    @EnableReactiveMethodSecurity
+    @EnableReactiveMethodSecurity(useAuthorizationManager = false)
     open class Config {
         var delegate = mockk<KotlinReactiveMessageService>()