Spring security 基于spring boot（1.3）的oauth2资源服务器：无法使用@PreAuthorize方法安全性_Spring Security_Spring Boot_Spring Cloud_Spring Security Oauth2

Spring security 基于spring boot（1.3）的oauth2资源服务器：无法使用@PreAuthorize方法安全性

spring-security spring-boot spring-cloud

Spring security 基于spring boot（1.3）的oauth2资源服务器：无法使用@PreAuthorize方法安全性,spring-security,spring-boot,spring-cloud,spring-security-oauth2,Spring Security,Spring Boot,Spring Cloud,Spring Security Oauth2,我们已经有一个Oauth授权服务器在运行，现在我正在尝试创建一个基于spring boot 1.3的非常简单的资源服务器，使用oauth2访问令牌进行保护。它工作正常，可以使用有效的oauth2访问令牌访问资源。但现在我想检查oauth作用域，所以我在方法之前添加了annotation@PreAuthorize，但它引发异常，应用程序无法启动： org.springframework.security.config.annotation.AlreadyBuiltException: This

我们已经有一个Oauth授权服务器在运行，现在我正在尝试创建一个基于spring boot 1.3的非常简单的资源服务器，使用oauth2访问令牌进行保护。它工作正常，可以使用有效的oauth2访问令牌访问资源。但现在我想检查oauth作用域，所以我在方法之前添加了annotation@PreAuthorize，但它引发异常，应用程序无法启动：

org.springframework.security.config.annotation.AlreadyBuiltException: This object has already been built

以下是资源类：

@SpringBootApplication
@RestController
@EnableResourceServer
@EnableAutoConfiguration
@EnableGlobalMethodSecurity(prePostEnabled = true)

public class ResourceServerApplication {

@PreAuthorize("#oauth2.hasScope('READ')")
@RequestMapping(method = RequestMethod.GET, value = "/username")
public String user(OAuth2Authentication auth) {
    return auth.getName();
}

public static void main(String[] args) {
    SpringApplication.run(ResourceServerApplication.class, args);
}

}

以下是我的POM的外观：

<dependencyManagement>
    <dependencies>
        <dependency>
            <groupId>org.springframework.boot</groupId>
            <artifactId>spring-boot-starter-parent</artifactId>
            <version>1.3.3.RELEASE</version>
            <type>pom</type>
            <scope>import</scope>
        </dependency>

        <dependency>
            <groupId>org.springframework.cloud</groupId>
            <artifactId>spring-cloud-starter-parent</artifactId>
            <version>Brixton.M5</version>
            <type>pom</type>
            <scope>import</scope>
        </dependency>
    </dependencies>
</dependencyManagement>

<dependencies>
    <dependency>
        <groupId>org.springframework.cloud</groupId>
        <artifactId>spring-cloud-security</artifactId>
    </dependency>
    <dependency>
        <groupId>org.springframework.cloud</groupId>
        <artifactId>spring-cloud-starter-oauth2</artifactId>
    </dependency>
    <dependency>
        <groupId>org.springframework.boot</groupId>
        <artifactId>spring-boot-starter-web</artifactId>
    </dependency>
    <dependency>
        <groupId>org.springframework.boot</groupId>
        <artifactId>spring-boot-starter-security</artifactId>
    </dependency>
    <dependency>
        <groupId>org.springframework.boot</groupId>
        <artifactId>spring-boot-starter-actuator</artifactId>
    </dependency>

    <dependency>
        <groupId>org.springframework</groupId>
        <artifactId>spring-webmvc</artifactId>
    </dependency>

    <dependency>
        <groupId>org.springframework.security.oauth</groupId>
        <artifactId>spring-security-oauth2</artifactId>
    </dependency>

    <!--  
    <dependency>
        <groupId>org.springframework.cloud</groupId>
        <artifactId>spring-cloud-starter-zuul</artifactId>
    </dependency>
    <dependency>
        <groupId>org.springframework.cloud</groupId>
        <artifactId>spring-cloud-starter-eureka</artifactId>
    </dependency>
    -->
</dependencies>


org.springframework.boot
spring启动程序父级
1.3.3.1发布
聚甲醛
进口
org.springframework.cloud
SpringCloudStarter父级
Brixton.M5
聚甲醛
进口
org.springframework.cloud
春季云安全
org.springframework.cloud
spring-cloud-starter-oauth2
org.springframework.boot
SpringBootStarterWeb
org.springframework.boot
弹簧启动安全
org.springframework.boot
弹簧靴起动器执行器
org.springframework
SpringWebMVC
org.springframework.security.oauth
spring-security-oauth2

异常跟踪：

org.springframework.beans.factory.BeanCreationException: Error creating bean with name 'springSecurityFilterChain' defined in class path resource [org/springframework/security/config/annotation/web/configuration/WebSecurityConfiguration.class]: Bean instantiation via factory method failed; nested exception is org.springframework.beans.BeanInstantiationException: Failed to instantiate [javax.servlet.Filter]: Factory method 'springSecurityFilterChain' threw exception; nested exception is org.springframework.beans.factory.BeanCreationException: Error creating bean with name 'resourceServerApplication': Initialization of bean failed; nested exception is org.springframework.aop.framework.AopConfigException: Unexpected AOP exception; nested exception is org.springframework.beans.factory.BeanCreationException: Error creating bean with name 'methodSecurityInterceptor' defined in class path resource [org/springframework/security/config/annotation/method/configuration/GlobalMethodSecurityConfiguration.class]: Bean instantiation via factory method failed; nested exception is org.springframework.beans.BeanInstantiationException: Failed to instantiate [org.aopalliance.intercept.MethodInterceptor]: Factory method 'methodSecurityInterceptor' threw exception; nested exception is org.springframework.security.config.annotation.AlreadyBuiltException: This object has already been built
    at org.springframework.beans.factory.support.ConstructorResolver.instantiateUsingFactoryMethod(ConstructorResolver.java:599) ~[spring-beans-4.2.5.RELEASE.jar:4.2.5.RELEASE]
    at org.springframework.beans.factory.support.AbstractAutowireCapableBeanFactory.instantiateUsingFactoryMethod(AbstractAutowireCapableBeanFactory.java:1123) ~[spring-beans-4.2.5.RELEASE.jar:4.2.5.RELEASE]
    at org.springframework.beans.factory.support.AbstractAutowireCapableBeanFactory.createBeanInstance(AbstractAutowireCapableBeanFactory.java:1018) ~[spring-beans-4.2.5.RELEASE.jar:4.2.5.RELEASE]
    at org.springframework.beans.factory.support.AbstractAutowireCapableBeanFactory.doCreateBean(AbstractAutowireCapableBeanFactory.java:510) ~[spring-beans-4.2.5.RELEASE.jar:4.2.5.RELEASE]
    at org.springframework.beans.factory.support.AbstractAutowireCapableBeanFactory.createBean(AbstractAutowireCapableBeanFactory.java:482) ~[spring-beans-4.2.5.RELEASE.jar:4.2.5.RELEASE]
    at org.springframework.beans.factory.support.AbstractBeanFactory$1.getObject(AbstractBeanFactory.java:306) ~[spring-beans-4.2.5.RELEASE.jar:4.2.5.RELEASE]
    at org.springframework.beans.factory.support.DefaultSingletonBeanRegistry.getSingleton(DefaultSingletonBeanRegistry.java:230) ~[spring-beans-4.2.5.RELEASE.jar:4.2.5.RELEASE]
    at org.springframework.beans.factory.support.AbstractBeanFactory.doGetBean(AbstractBeanFactory.java:302) ~[spring-beans-4.2.5.RELEASE.jar:4.2.5.RELEASE]
    at org.springframework.beans.factory.support.AbstractBeanFactory.getBean(AbstractBeanFactory.java:202) ~[spring-beans-4.2.5.RELEASE.jar:4.2.5.RELEASE]
    at org.springframework.context.support.AbstractApplicationContext.getBean(AbstractApplicationContext.java:1060) ~[spring-context-4.2.5.RELEASE.jar:4.2.5.RELEASE]
    at org.springframework.web.filter.DelegatingFilterProxy.initDelegate(DelegatingFilterProxy.java:326) ~[spring-web-4.2.5.RELEASE.jar:4.2.5.RELEASE]
    at org.springframework.web.filter.DelegatingFilterProxy.initFilterBean(DelegatingFilterProxy.java:235) ~[spring-web-4.2.5.RELEASE.jar:4.2.5.RELEASE]
    at org.springframework.web.filter.GenericFilterBean.init(GenericFilterBean.java:199) ~[spring-web-4.2.5.RELEASE.jar:4.2.5.RELEASE]
    at org.apache.catalina.core.ApplicationFilterConfig.initFilter(ApplicationFilterConfig.java:279) ~[tomcat-embed-core-8.0.32.jar:8.0.32]
    at org.apache.catalina.core.ApplicationFilterConfig.<init>(ApplicationFilterConfig.java:109) ~[tomcat-embed-core-8.0.32.jar:8.0.32]
    at org.apache.catalina.core.StandardContext.filterStart(StandardContext.java:4659) [tomcat-embed-core-8.0.32.jar:8.0.32]
    at org.apache.catalina.core.StandardContext.startInternal(StandardContext.java:5281) [tomcat-embed-core-8.0.32.jar:8.0.32]
    at org.apache.catalina.util.LifecycleBase.start(LifecycleBase.java:147) [tomcat-embed-core-8.0.32.jar:8.0.32]
    at org.apache.catalina.core.ContainerBase$StartChild.call(ContainerBase.java:1408) [tomcat-embed-core-8.0.32.jar:8.0.32]
    at org.apache.catalina.core.ContainerBase$StartChild.call(ContainerBase.java:1398) [tomcat-embed-core-8.0.32.jar:8.0.32]
    at java.util.concurrent.FutureTask.run(FutureTask.java:266) [na:1.8.0_65]
    at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1142) [na:1.8.0_65]
    at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:617) [na:1.8.0_65]
    at java.lang.Thread.run(Thread.java:745) [na:1.8.0_65]
Caused by: org.springframework.beans.BeanInstantiationException: Failed to     instantiate [javax.servlet.Filter]: Factory method 'springSecurityFilterChain' threw exception; nested exception is org.springframework.beans.factory.BeanCreationException: Error creating bean with name 'resourceServerApplication': Initialization of bean failed; nested exception is org.springframework.aop.framework.AopConfigException: Unexpected AOP exception; nested exception is org.springframework.beans.factory.BeanCreationException: Error creating bean with name 'methodSecurityInterceptor' defined in class path resource [org/springframework/security/config/annotation/method/configuration/GlobalMethodSecurityConfiguration.class]: Bean instantiation via factory method failed; nested exception is org.springframework.beans.BeanInstantiationException: Failed to instantiate [org.aopalliance.intercept.MethodInterceptor]: Factory method 'methodSecurityInterceptor' threw exception; nested exception is org.springframework.security.config.annotation.AlreadyBuiltException: This object has already been built
    at org.springframework.beans.factory.support.SimpleInstantiationStrategy.instantiate(SimpleInstantiationStrategy.java:189) ~[spring-beans-4.2.5.RELEASE.jar:4.2.5.RELEASE]
    at org.springframework.beans.factory.support.ConstructorResolver.instantiateUsingFactoryMethod(ConstructorResolver.java:588) ~[spring-beans-4.2.5.RELEASE.jar:4.2.5.RELEASE]
    ... 23 common frames omitted

org.springframework.beans.factory.BeanCreationException:创建名为“springSecurityFilterChain”的bean时出错，该bean在类路径资源[org/springframework/security/config/annotation/web/configuration/WebSecurityConfiguration.class]：通过工厂方法实例化bean失败；嵌套异常为org.springframework.beans.beanstantiationException:未能实例化[javax.servlet.Filter]：工厂方法“springSecurityFilterChain”引发异常；嵌套异常为org.springframework.beans.factory.BeanCreationException:创建名为“resourceServerApplication”的bean时出错：bean初始化失败；嵌套异常为org.springframework.aop.framework.aopconfigeexception：意外的aop异常；嵌套异常为org.springframework.beans.factory.BeanCreationException:创建名为“methodSecurityInterceptor”的bean时出错，该bean在类路径资源[org/springframework/security/config/annotation/method/configuration/GlobalMethodSecurityConfiguration.class]中定义：通过工厂方法实例化bean失败；嵌套异常为org.springframework.beans.BeanInstantiationException:未能实例化[org.aopalliance.intercept.MethodInterceptor]：工厂方法“methodSecurityInterceptor”引发异常；嵌套异常为org.springframework.security.config.annotation.AlreadyBuiltException：此对象已生成
在org.springframework.beans.factory.support.ConstructorResolver.InstanceUsingFactoryMethod（ConstructorResolver.java:599）~[spring-beans-4.2.5.RELEASE.jar:4.2.5.RELEASE]
在org.springframework.beans.factory.support.AbstractAutowireCapableBeanFactory.InstanceUsingFactoryMethod（AbstractAutowireCapableBeanFactory.java:1123）~[spring-beans-4.2.5.RELEASE.jar:4.2.5.RELEASE]
在org.springframework.beans.factory.support.AbstractAutowireCapableBeanFactory.createBeanInstance（AbstractAutowireCapableBeanFactory.java:1018）~[spring-beans-4.2.5.RELEASE.jar:4.2.5.RELEASE]
在org.springframework.beans.factory.support.AbstractAutowireCapableBeanFactory.doCreateBean（AbstractAutowireCapableBeanFactory.java:510）~[spring-beans-4.2.5.RELEASE.jar:4.2.5.RELEASE]
在org.springframework.beans.factory.support.AbstractAutowireCapableBeanFactory.createBean（AbstractAutowireCapableBeanFactory.java:482）~[spring-beans-4.2.5.RELEASE.jar:4.2.5.RELEASE]
在org.springframework.beans.factory.support.AbstractBeanFactory$1.getObject（AbstractBeanFactory.java:306）~[spring-beans-4.2.5.RELEASE.jar:4.2.5.RELEASE]
在org.springframework.beans.factory.support.DefaultSingletonBeanRegistry.getSingleton（DefaultSingletonBeanRegistry.java:230）~[spring-beans-4.2.5.RELEASE.jar:4.2.5.RELEASE]
在org.springframework.beans.factory.support.AbstractBeanFactory.doGetBean（AbstractBeanFactory.java:302）~[spring-beans-4.2.5.RELEASE.jar:4.2.5.RELEASE]
在org.springframework.beans.factory.support.AbstractBeanFactory.getBean（AbstractBeanFactory.java:202）~[spring-beans-4.2.5.RELEASE.jar:4.2.5.RELEASE]
在org.springframework.context.support.AbstractApplicationContext.getBean（AbstractApplicationContext.java:1060）~[spring-context-4.2.5.RELEASE.jar:4.2.5.RELEASE]
在org.springframework.web.filter.DelegatingFilterProxy.initDelegate（DelegatingFilterProxy.java:326）~[spring-web-4.2.5.RELEASE.jar:4.2.5.RELEASE]
在org.springframework.web.filter.DelegatingFilterProxy.initFilterBean（DelegatingFilterProxy.java:235）~[spring-web-4.2.5.RELEASE.jar:4.2.5.RELEASE]
在org.springframework.web.filter.GenericFilterBean.init（GenericFilterBean.java:199）~[spring-web-4.2.5.RELEASE.jar:4.2.5.RELEASE]
在org.apache.catalina.core.ApplicationFilterConfig.initFilter（ApplicationFilterConfig.java:279）~[tomcat-embed-core-8.0.32.jar:8.0.32]
在org.apache.catalina.core.ApplicationFilterConfig.（ApplicationFilterConfig.java:109）~[tomcat-embed-core-8.0.32.jar:8.0.32]
在org.apache.catalina.core.StandardContext.filterStart（StandardContext.java:4659）[tomcat-embed-core-8.0.32.jar:8.0.32]
在org.apache.catalina.core.StandardContext.startInternal（StandardContext.java:5281）[tomcat-embed-core-8.0.32.jar:8.0.32]
在org.apache.catalina.util.LifecycleBase.start（LifecycleBase.java:147）[tomcat-embed-core-8.0.32.jar:8.0.32]
在org.apache.catalina.core.ContainerBase$StartChild.call（ContainerBase.java:1408）[tomcat-embed-core-8.0.32.jar:8.0.32]
在org.apache.catalina.core.ContainerBase$StartChild.call（ContainerBase.java:1398）[tomcat-embed-core-8.0.32.jar:8.0.32]
在java.util.conc
@Configuration
@EnableGlobalMethodSecurity(prePostEnabled = true)
@EnableResourceServer
class ResourceAppConfig {}