EnableGlobalMethodSecurity stops ability to use GrpcClient

This works just fine…

@Configuration
public class AppConfig extends GlobalMethodSecurityConfiguration {

  @GrpcClient("userService")
  private UserServiceGrpc.UserServiceBlockingStub userService;

  @Bean
  public UserClient userClient() {
    return new UserClientWrapper(userService);
  }

But when security is added…

@Configuration
@EnableGlobalMethodSecurity(prePostEnabled = true)
public class AppConfig extends GlobalMethodSecurityConfiguration {

  @GrpcClient("userService")
  private UserServiceGrpc.UserServiceBlockingStub userService;

  @Bean
  public UserClient userClient() {
    return new UserClientWrapper(userService);
  }

the userService is always null.

This also works without global security…

@Configuration
@GrpcClientBean(
    clazz = UserServiceGrpc.UserServiceBlockingStub.class,
    beanName = "userService",
    client = @GrpcClient("userService"))
public class AppConfig extends GlobalMethodSecurityConfiguration {

  @Bean
  public UserClient userClient(@Qualifier("userService") final UserServiceGrpc.UserServiceBlockingStub userService) {
    return new UserClientWrapper(userService);
  }

But does not work with…

@Configuration
@GrpcClientBean(
    clazz = UserServiceGrpc.UserServiceBlockingStub.class,
    beanName = "userService",
    client = @GrpcClient("userService"))
@EnableGlobalMethodSecurity(prePostEnabled = true)
public class AppConfig extends GlobalMethodSecurityConfiguration {

  @Bean
  public UserClient userClient(@Qualifier("userService") final UserServiceGrpc.UserServiceBlockingStub userService) {
    return new UserClientWrapper(userService);
  }

Thoughts?

Thank you in advance!

[fgarsombke]

I’ve determined its the combination of extends GlobalMethodSecurityConfiguration and @EnableGlobalMethodSecurity(prePostEnabled = true, proxyTargetClass = true) that causes this issue.

Without extends GlobalMethodSecurityConfiguration it works correctly.

I will continue to investigate why the extends causes the null issue.

[e7868a]

GlobalMethodSecurityConfiguration implements SmartInitializingSingleton, it is created early than GrpcClientBeanPostProcessor。GrpcClientBeanPostProcessor can’t process AppConfig and it’s dependency beans。

create stub bean with GrpcClientBean, use @Lazy to delay field inject。

Maybe GrpcClientBeanPostProcessor should implments PriorityOrdered to get higher priority。