|
@@ -1,5 +1,5 @@
|
|
/*
|
|
/*
|
|
- * Copyright 2002-2022 the original author or authors.
|
|
|
|
|
|
+ * Copyright 2002-2023 the original author or authors.
|
|
*
|
|
*
|
|
* Licensed under the Apache License, Version 2.0 (the "License");
|
|
* Licensed under the Apache License, Version 2.0 (the "License");
|
|
* you may not use this file except in compliance with the License.
|
|
* you may not use this file except in compliance with the License.
|
|
@@ -20,6 +20,7 @@ import java.io.Serializable;
|
|
import java.util.ArrayList;
|
|
import java.util.ArrayList;
|
|
import java.util.Arrays;
|
|
import java.util.Arrays;
|
|
import java.util.List;
|
|
import java.util.List;
|
|
|
|
+import java.util.function.Consumer;
|
|
import java.util.function.Supplier;
|
|
import java.util.function.Supplier;
|
|
|
|
|
|
import org.aopalliance.intercept.MethodInterceptor;
|
|
import org.aopalliance.intercept.MethodInterceptor;
|
|
@@ -64,6 +65,8 @@ import org.springframework.security.test.context.support.WithSecurityContextTest
|
|
import org.springframework.test.context.ContextConfiguration;
|
|
import org.springframework.test.context.ContextConfiguration;
|
|
import org.springframework.test.context.TestExecutionListeners;
|
|
import org.springframework.test.context.TestExecutionListeners;
|
|
import org.springframework.test.context.junit.jupiter.SpringExtension;
|
|
import org.springframework.test.context.junit.jupiter.SpringExtension;
|
|
|
|
+import org.springframework.web.context.ConfigurableWebApplicationContext;
|
|
|
|
+import org.springframework.web.context.support.AnnotationConfigWebApplicationContext;
|
|
|
|
|
|
import static org.assertj.core.api.Assertions.assertThat;
|
|
import static org.assertj.core.api.Assertions.assertThat;
|
|
import static org.assertj.core.api.Assertions.assertThatExceptionOfType;
|
|
import static org.assertj.core.api.Assertions.assertThatExceptionOfType;
|
|
@@ -418,6 +421,17 @@ public class PrePostMethodSecurityConfigurationTests {
|
|
assertThat(this.spring.getContext().containsBean("annotationSecurityAspect$0")).isFalse();
|
|
assertThat(this.spring.getContext().containsBean("annotationSecurityAspect$0")).isFalse();
|
|
}
|
|
}
|
|
|
|
|
|
|
|
+ // gh-13572
|
|
|
|
+ @Test
|
|
|
|
+ public void configureWhenBeanOverridingDisallowedThenWorks() {
|
|
|
|
+ this.spring.register(MethodSecurityServiceConfig.class, BusinessServiceConfig.class)
|
|
|
|
+ .postProcessor(disallowBeanOverriding()).autowire();
|
|
|
|
+ }
|
|
|
|
+
|
|
|
|
+ private static Consumer<ConfigurableWebApplicationContext> disallowBeanOverriding() {
|
|
|
|
+ return (context) -> ((AnnotationConfigWebApplicationContext) context).setAllowBeanDefinitionOverriding(false);
|
|
|
|
+ }
|
|
|
|
+
|
|
@EnableMethodSecurity
|
|
@EnableMethodSecurity
|
|
static class MethodSecurityServiceConfig {
|
|
static class MethodSecurityServiceConfig {
|
|
|
|
|