Improve @AuthenticationPrincipal meta-annotations

[kse-music]

Closes gh-15286

[jzheaux]

Thanks for contributing this, @kse-music! I've left some initial feedback inline.

[kse-music]

Thanks,@jzheaux ,all feedback is done

[jzheaux]

Thanks, @kse-music! Given that this needs to be placed in the other AuthenticationPrincipalArgumentResolvers, I extracted the logic in AuthorizationAnnotationUtils into an API. Please see if it works for you. If so, please also update this PR to change the other non-deprecated instances of AuthenticationPrincipalArgumentResolver in the project.

[kse-music]

Thanks, @kse-music! Given that this needs to be placed in the other AuthenticationPrincipalArgumentResolvers, I extracted the logic in AuthorizationAnnotationUtils into an API. Please see if it works for you. If so, please also update this PR to change the other non-deprecated instances of AuthenticationPrincipalArgumentResolver in the project.

All non-deprecated instances of AuthenticationPrincipalArgumentResolver in the project has done.

[jzheaux]

Thanks, @kse-music, this is taking shape very nicely.

I believe our last step is to make this simple to configure by picking up the AnnotationTemplateExpressionDefaults bean in configuration.

I've added documentation so you can see the expectation that someone should be able to do:

@Bean
public AnnotationTemplateExpressionDefaults templateExpressionDefaults() {
    return new AnnotationTemplateExpressionDefaults();
}

And now they will be able to use placeholders in any @AuthenticationPrincipal meta-annotation definition.

Are you able to add this to the following spring-security-config classes: WebMvcSecurityConfiguration, ServerHttpSecurityConfiguration, and WebSocketMessageBrokerSecurityConfiguration? It's a little harder, however, if you are able, it would be great to add to WebSocketMessageBrokerSecurityBeanDefinitionParser, too.

[kse-music]

@jzheaux ,I tried to add it

[kse-music]

@jzheaux I have added the code, please help to review it.Thank you

[jzheaux]

Thanks for all your help with this PR, @kse-music! I added a couple of commits to add more testing and also to deprecate PrePostTemplateDefaults. It's now merged into main.

[jzheaux]

If you are interested, it would be nice to do the same with @CurrentSecurityContext. I've added #15551 to address that. That PR should go a lot more quickly.

[kse-music]

If you are interested, it would be nice to do the same with @CurrentSecurityContext. I've added #15551 to address that. That PR should go a lot more quickly.

Yes,I have added PR #15553