Webflux使用@EnableReactiveMethodSecurity的@hasAuthorities出现的报错

背景

spring boot webmvc项目重构为webflux项目，原PreAuthorize注解报错。

代码和报错信息

@PreAuthorize会发生如下错误。

@RestController
@RequestMapping("sample")
public class SampleController {
       @RequestMapping
       @PreAuthorize("hasAuthority('ADMIN_ROLE')")
        public Mono index(@AuthenticationPrincipal UserDetails useDetails) {
             return Mono.empty();
        }
}

错误如下

No MethodInvocation found: Check that an AOP invocation is in progress, and that the ExposeInvocationInterceptor is upfront in the interceptor chain. Specifically, note that advices with order HIGHEST_PRECEDENCE will execute before ExposeInvocationInterceptor!

解决方案

@EnableReactiveMethodSecurity如果下面可以处理的顺序是最高级别，则它起作用

@EnableReactiveMethodSecurity(order = Ordered.HIGHEST_PRECEDENCE)