SEC-1885: Adding <debug/> causes NoSuchMethodException when FilterChainProxy's relies on beans that have Autowired Constructors

[spring-projects-issues]

Rob Winch (Migrated from SEC-1885) said:

An example would be if a configuration used and a custom AuthenticationProvider or UserDetailsService which had an Autowired constructor one might get an exception similar to NoSuchMethodException MyCustomAuthenticationProvider.()

[spring-projects-issues]

Rob Winch said:

This was happening because SecurityDebugBeanFactoryPostProcessor looked up the FilterChainProxy from the ApplicationContext which attempted to resolve all of the FilterChainProxy's dependent beans. This occurred before the AutowiredAnnotationBeanPostProcessor was registered causing the Exception. The SecurityDebugBeanFactoryPostProcessor now only interacts with BeanDefinition's to prevent this from happening

[spring-projects-issues]

ohad redlich said:

thanks rob !