Can not start spring application with webflux and websocket for ObjectPostProcessor is needed.

[Ayden-Franklin]

Summary

***************************
APPLICATION FAILED TO START
***************************

Description:

A component required a bean of type 'org.springframework.security.config.annotation.ObjectPostProcessor' that could not be found.

Action:

Consider defining a bean of type 'org.springframework.security.config.annotation.ObjectPostProcessor' in your configuration.

Actual Behavior

Fail to start. BUT it works well without dependency of 'org.springframework.boot:spring-boot-starter-websocket'

Configuration

@Configuration
@EnableWebFluxSecurity
public class WebSecurityConfig {
    @Bean
    public SecurityWebFilterChain springSecurityFilterChain(ServerHttpSecurity http) {
       ...
    }
   ...
}

@Configuration
public class WebSocketConfiguration {
    @Bean
    public HandlerMapping handlerMapping() {
        Map<String, WebSocketHandler> map = new HashMap<>();
        map.put("/websocket", new WebSocketMessageHandler());
        SimpleUrlHandlerMapping mapping = new SimpleUrlHandlerMapping();
        mapping.setUrlMap(map);
        mapping.setOrder(-1); // before annotated controllers
        return mapping;
    }

    @Bean
    public WebSocketHandlerAdapter handlerAdapter() {
        return new WebSocketHandlerAdapter();
    }
}

Version

spring boot 2.0.5.RELEASE
io.spring.platform:platform-bom:Cairo-SR4
org.springframework.cloud:spring-cloud-dependencies:Finchley.SR1

Sample

[rwinch]

Thanks for the report. It almost sounds as though you are using the imperative (non-reactive) web socket support. Can you provide a complete stacktrace? Perhaps a small sample project?

[Ayden-Franklin]

Thanks for your response. I tried again and found that it works well while using dependency of 'org.springframework:spring-websocket' instead of 'org.springframework.boot:spring-boot-starter-websocket'. In deed, spring-boot-starter-websocket depends on 'org.springframework:spring-webmvc' to case this issue. We can exclude 'org.springframework:spring-webmvc' to avoid it.

I suggest that spring-boot-starter-websocket does not depends on 'org.springframework:spring-webmvc' or there is another spring-boot-starter-webflux-websocket which depends on 'org.springframework:spring-webflux' instead of 'org.springframework:spring-webmvc'.

[Ayden-Franklin]

Perhaps because in my gradle dependencies 'spring-boot-starter-websocket' appears before 'org.springframework:spring-webflux'. It works strangely if there are both spring-webmvc and spring-webflux in the classpath.

[rwinch]

Thanks for the additional details! Can you please create a sample and post this to spring-boot? They are in charge of the autoconfiguraiton and the starter poms. When you create that ticket, can you please provide a link here?

[Ayden-Franklin]

14810
Sorry, I do not know how to link it. Is it ok?

[rwinch]

Thanks that works.

I'm closing this issue as there is nothing we can do from the Spring Security side of things