spring security 6.1.6 + spring boot 3.1.7 관련 질문

Question

현재 spring boot 3.1.7 버전과 spring security 6.1.6 을 사용 중에 있습니다.spring security 의 버전이 올라가면서 DSL lambda 버전으로 바뀌었습니다.시큐리티 관련 securityConfig 을 구성하는 도중 오류가 발생해 질문 남깁니다.해당 코드는 제가 실제 작성한 코드입니다.&#64;EnableWebSecurity(debug &#61; true) &#64;Configuration public class SecurityConfig { &#64;Bean public SecurityFilterChain filterChain(HttpSecurity http) throws Exception { return http.csrf(AbstractHttpConfigurer::disable) .sessionManagement(session -> session .sessionCreationPolicy(SessionCreationPolicy.STATELESS) ) .authorizeHttpRequests(request -> request .requestMatchers( &#34;/user-service/**&#34; ) .permitAll() ).authorizeHttpRequests(request -> request.anyRequest().authenticated()) .build(); } // 비밀번호 암호화을 위한 BCryptPasswordEncoder Bean 생성 &#64;Bean public PasswordEncoder passwordEncoder() { return new BCryptPasswordEncoder(); } } 이렇게 작성했는데,, Error creating bean with name 'springSecurityFilterChain': Failed to instantiate [org.springframework.security.config.annotation.web.configuration.WebMvcSecurityConfiguration$CompositeFilterChainProxy]: Constructor threw exception at org.springframework.beans.factory.support.ConstructorResolver.instantiate(ConstructorResolver.java:321) ~[spring-beans-6.0.15.jar:6.0.15] at org.springframework.beans.factory.support.ConstructorResolver.autowireConstructor(ConstructorResolver.java:309) ~[spring-beans-6.0.15.jar:6.0.15] at org.springframework.beans.factory.support.AbstractAutowireCapableBeanFactory.autowireConstructor(AbstractAutowireCapableBeanFactory.java:1350) ~[spring-beans-6.0.15.jar:6.0.15] at org.springframework.beans.factory.support.AbstractAutowireCapableBeanFactory.createBeanInstance(AbstractAutowireCapableBeanFactory.java:1187) ~[spring-beans-6.0.15.jar:6.0.15] at org.springframework.beans.factory.support.AbstractAutowireCapableBeanFactory.doCreateBean(AbstractAutowireCapableBeanFactory.java:558) ~[spring-beans-6.0.15.jar:6.0.15] at org.springframework.beans.factory.support.AbstractAutowireCapableBeanFactory.createBean(AbstractAutowireCapableBeanFactory.java:518) ~[spring-beans-6.0.15.jar:6.0.15] at org.springframework.beans.factory.support.AbstractBeanFactory.lambda$doGetBean$0(AbstractBeanFactory.java:325) ~[spring-beans-6.0.15.jar:6.0.15] at org.springframework.beans.factory.support.DefaultSingletonBeanRegistry.getSingleton(DefaultSingletonBeanRegistry.java:234) ~[spring-beans-6.0.15.jar:6.0.15] at org.springframework.beans.factory.support.AbstractBeanFactory.doGetBean(AbstractBeanFactory.java:323) ~[spring-beans-6.0.15.jar:6.0.15] at org.springframework.beans.factory.support.AbstractBeanFactory.getBean(AbstractBeanFactory.java:199) ~[spring-beans-6.0.15.jar:6.0.15] at org.springframework.beans.factory.support.AbstractBeanFactory.doGetBean(AbstractBeanFactory.java:312) ~[spring-beans-6.0.15.jar:6.0.15] at org.springframework.beans.factory.support.AbstractBeanFactory.getBean(AbstractBeanFactory.java:199) ~[spring-beans-6.0.15.jar:6.0.15] at org.springframework.beans.factory.support.DefaultListableBeanFactory.preInstantiateSingletons(DefaultListableBeanFactory.java:973) ~[spring-beans-6.0.15.jar:6.0.15] at org.springframework.context.support.AbstractApplicationContext.finishBeanFactoryInitialization(AbstractApplicationContext.java:950) ~[spring-context-6.0.15.jar:6.0.15] at org.springframework.context.support.AbstractApplicationContext.refresh(AbstractApplicationContext.java:616) ~[spring-context-6.0.15.jar:6.0.15] at org.springframework.boot.web.servlet.context.ServletWebServerApplicationContext.refresh(ServletWebServerApplicationContext.java:146) ~[spring-boot-3.1.7.jar:3.1.7] at org.springframework.boot.SpringApplication.refresh(SpringApplication.java:746) ~[spring-boot-3.1.7.jar:3.1.7] at org.springframework.boot.SpringApplication.refreshContext(SpringApplication.java:448) ~[spring-boot-3.1.7.jar:3.1.7] at org.springframework.boot.SpringApplication.run(SpringApplication.java:324) ~[spring-boot-3.1.7.jar:3.1.7] at org.springframework.boot.SpringApplication.run(SpringApplication.java:1321) ~[spring-boot-3.1.7.jar:3.1.7] at org.springframework.boot.SpringApplication.run(SpringApplication.java:1310) ~[spring-boot-3.1.7.jar:3.1.7] at com.user_service.UserServiceApplication.main(UserServiceApplication.java:14) ~[main/:na] Caused by: org.springframework.beans.BeanInstantiationException: Failed to instantiate [org.springframework.security.config.annotation.web.configuration.WebMvcSecurityConfiguration$CompositeFilterChainProxy]: Constructor threw exception at org.springframework.beans.BeanUtils.instantiateClass(BeanUtils.java:225) ~[spring-beans-6.0.15.jar:6.0.15] at org.springframework.beans.factory.support.SimpleInstantiationStrategy.instantiate(SimpleInstantiationStrategy.java:110) ~[spring-beans-6.0.15.jar:6.0.15] at org.springframework.beans.factory.support.ConstructorResolver.instantiate(ConstructorResolver.java:318) ~[spring-beans-6.0.15.jar:6.0.15] ... 21 common frames omitted Caused by: java.lang.IllegalStateException: Couldn't find FilterChainProxy in [org.springframework.web.servlet.handler.HandlerMappingIntrospector$$Lambda$1353/0x00000008009fcc00&#64;12a8d03b, org.springframework.security.web.debug.DebugFilter&#64;5620470a] at org.springframework.security.config.annotation.web.configuration.WebMvcSecurityConfiguration$CompositeFilterChainProxy.findFilterChainProxy(WebMvcSecurityConfiguration.java:302) ~[spring-security-config-6.1.6.jar:6.1.6] at org.springframework.security.config.annotation.web.configuration.WebMvcSecurityConfiguration$CompositeFilterChainProxy.<init>(WebMvcSecurityConfiguration.java:214) ~[spring-security-config-6.1.6.jar:6.1.6] at java.base/jdk.internal.reflect.NativeConstructorAccessorImpl.newInstance0(Native Method) ~[na:na] at java.base/jdk.internal.reflect.NativeConstructorAccessorImpl.newInstance(NativeConstructorAccessorImpl.java:77) ~[na:na] at java.base/jdk.internal.reflect.DelegatingConstructorAccessorImpl.newInstance(DelegatingConstructorAccessorImpl.java:45) ~[na:na] at java.base/java.lang.reflect.Constructor.newInstanceWithCaller(Constructor.java:499) ~[na:na] at java.base/java.lang.reflect.Constructor.newInstance(Constructor.java:480) ~[na:na] at org.springframework.beans.BeanUtils.instantiateClass(BeanUtils.java:212) ~[spring-beans-6.0.15.jar:6.0.15] ... 23 common frames omitted 이런 오류가 발생합니다. 어떤 부분이 문제일까요? 고수님들 도와주세요!

カワウソ · Answer

https://github.com/spring-projects/spring-security/issues/14370일단 스프링 부트 3.1.5 밑으로 내리시는 걸 추천드립니다.위 문제가 해결된 스프링 시큐리티 6.1.7 과 6.2.2 는 아직 릴리즈 전 입니다.https://github.com/spring-projects/spring-security/commit/7cd626fe2569346b945feec40fa16f231a558fde디버그 모드를 활성화할 경우 못 찾는 버그가 있었나봅니다.

집킨 · Answer

시큐리티버전을 6.1.7로 업데이트 해보세요

피라미드1층 · Answer

@EnableWebSecurity(debug = true)debug true 때문에 발생한 문제로 보입니다.간단한 해결 방법은 debug = true를 지우시면 되고시큐리티 경험이 있으시면 debug true 시 filter chain이 뜨질 않을텐데web mvc config로 debug 이니셜 커스터마이징을 하시면 됩니다.

spring security 6.1.6 + spring boot 3.1.7 관련 질문

3개의 답변

기술 목록