Spring Boot 3.x WebSecurity适配及启动报错问题求助

问题概述 #

自学Spring Boot时采用3.0.2版本（课程使用更低版本，WebSecurityConfigurerAdapter已被移除，自行适配WebSecurity配置类），应用启动失败。经排查，报错根源为IPostRepository中的findAllByUserOrderByCreateDate方法，对应的Post实体类不存在user属性。

相关代码片段 #

当前WebSecurity配置类 #

@Configuration
@EnableWebSecurity
public class WebSecurityConfig {

    @Bean
    public SecurityFilterChain securityFilterChain(HttpSecurity http) throws Exception {
        http
            .authorizeHttpRequests(auth -> auth
                .requestMatchers("/", "/home").permitAll()
                .anyRequest().authenticated()
            )
            .formLogin(form -> form
                .loginPage("/login")
                .permitAll()
            )
            .logout(logout -> logout.permitAll());
        return http.build();
    }

    @Bean
    public UserDetailsService userDetailsService() {
        UserDetails user =
             User.withDefaultPasswordEncoder()
                .username("user")
                .password("password")
                .roles("USER")
                .build();
        return new InMemoryUserDetailsManager(user);
    }
}

课程参考WebSecurity配置类（旧版本） #

@Configuration
@EnableWebSecurity
public class WebSecurityConfig extends WebSecurityConfigurerAdapter {

    @Override
    protected void configure(HttpSecurity http) throws Exception {
        http
            .authorizeRequests()
                .antMatchers("/", "/home").permitAll()
                .anyRequest().authenticated()
                .and()
            .formLogin()
                .loginPage("/login")
                .permitAll()
                .and()
            .logout()
                .permitAll();
    }

    @Autowired
    public void configureGlobal(AuthenticationManagerBuilder auth) throws Exception {
        auth
            .inMemoryAuthentication()
                .withUser("user").password("{noop}password").roles("USER");
    }
}

IPostRepository代码 #

public interface IPostRepository extends JpaRepository<Post, Long> {
    List<Post> findAllByUserOrderByCreateDate(User user);
}

Post实体类代码 #

@Entity
public class Post {
    @Id
    @GeneratedValue(strategy = GenerationType.AUTO)
    private Long id;
    private String title;
    private String content;
    @Column(name = "create_date")
    private LocalDateTime createDate;
    // 缺失user属性及对应getter/setter
}

pom.xml关键依赖 #

<dependencies>
    <dependency>
        <groupId>org.springframework.boot</groupId>
        <artifactId>spring-boot-starter-web</artifactId>
    </dependency>
    <dependency>
        <groupId>org.springframework.boot</groupId>
        <artifactId>spring-boot-starter-security</artifactId>
    </dependency>
    <dependency>
        <groupId>org.springframework.boot</groupId>
        <artifactId>spring-boot-starter-data-jpa</artifactId>
    </dependency>
    <dependency>
        <groupId>com.h2database</groupId>
        <artifactId>h2</artifactId>
        <scope>runtime</scope>
    </dependency>
</dependencies>

<parent>
    <groupId>org.springframework.boot</groupId>
    <artifactId>spring-boot-starter-parent</artifactId>
    <version>3.0.2</version>
    <relativePath/> <!-- lookup parent from repository -->
</parent>

完整报错信息 #

org.springframework.beans.factory.UnsatisfiedDependencyException: Error creating bean with name 'postController': Unsatisfied dependency expressed through field 'postRepository'; nested exception is org.springframework.beans.factory.BeanCreationException: Error creating bean with name 'IPostRepository' defined in com.example.demo.IPostRepository defined in @EnableJpaRepositories declared on JpaRepositoriesRegistrar.EnableJpaRepositoriesConfiguration: Invocation of init method failed; nested exception is java.lang.IllegalArgumentException: Failed to create query for method public abstract java.util.List com.example.demo.IPostRepository.findAllByUserOrderByCreateDate(com.example.demo.User)! No property 'user' found for type 'Post'!
    at org.springframework.beans.factory.annotation.AutowiredAnnotationBeanPostProcessor$AutowiredFieldElement.resolveFieldValue(AutowiredAnnotationBeanPostProcessor.java:659)
    ... 省略后续堆栈信息

解决方案 #

1. 补充Post实体的user关联属性
   根据业务逻辑，在Post实体中添加与User的关联关系（通常为@ManyToOne），并生成对应getter/setter：

   @Entity
   public class Post {
       @Id
       @GeneratedValue(strategy = GenerationType.AUTO)
       private Long id;
       private String title;
       private String content;
       @Column(name = "create_date")
       private LocalDateTime createDate;
       
       // 多对一关联User实体
       @ManyToOne
       @JoinColumn(name = "user_id")
       private User user;
   
       // getter/setter
       public User getUser() {
           return user;
       }
   
       public void setUser(User user) {
           this.user = user;
       }
   
       // 其他属性的getter/setter
   }
   

2. 验证Repository方法匹配性
   确保findAllByUserOrderByCreateDate的参数类型与实体中user属性类型一致；若需根据用户ID查询，可修改方法为findAllByUserIdOrderByCreateDate(Long userId)，并同步调整实体关联字段或属性。

3. 同步数据库表结构
   若使用自动建表，Spring Data JPA会自动生成user_id字段；若手动维护表结构，需在post表中添加该字段并可选择建立外键关联。

4. 确认WebSecurity配置有效性
   当前Spring Boot 3.0+的Security配置已正确使用SecurityFilterChain替代WebSecurityConfigurerAdapter，本身无语法问题，启动失败的根源并非Security配置，修复实体后即可正常启动。

内容的提问来源于stack exchange，提问作者Nicolas Bayer