多Rabbit Binder下ConnectionFactoryCustomizer失效，TLS配置遇登录拒绝

问题根源 #

你创建的全局ConnectionFactoryCustomizer Bean无法作用于每个Rabbit Binder独立的ConnectionFactory实例——每个binder运行在专属的子Spring上下文里，全局Bean不会被加载到这些子上下文中。同时，你注入的是顶层RabbitProperties，而非每个binder自身环境中的配置，导致SASL机制的判断逻辑无法匹配每个binder的实际TLS配置，最终出现Login was refused using authentification mechanism PLAIN.错误。

解决方案 #

方案一：使用BinderCustomizer针对性配置每个binder #

创建BinderCustomizer Bean，直接对每个Rabbit类型的binder进行配置，确保读取当前binder的专属配置并设置正确的SASL机制：

@Bean
fun binderCustomizer(): BinderCustomizer {
    return BinderCustomizer { binder, binderName ->
        if (binder is RabbitMessageChannelBinder) {
            val rabbitProperties = binder.rabbitProperties
            val connectionFactory = binder.connectionFactory
            connectionFactory.saslConfig = if (rabbitProperties.ssl.enabled == true) {
                EXTERNAL
            } else {
                PLAIN
            }
        }
    }
}

方案二：直接在binder环境中配置SASL属性 #

无需自定义Bean，在每个binder的environment配置中添加SASL相关属性，指定使用EXTERNAL认证机制：

cloud:
    stream:
      binders:
        rabbit1:
          type: rabbit
          environment:
            spring:
              rabbitmq:
                host: localhost
                port: 5671
                virtual-host: /
                ssl:
                  enabled: true
                  algorithm: algorithm
                  verify-hostname: true
                  key-store: file:/rabbit
                  key-store-password: keystorepassword
                  trust-store: file:/rabbit
                  trust-store-password: truststorepassword
                sasl:
                  enabled-mechanisms: EXTERNAL
                  config: EXTERNAL
        rabbit2:
          type: rabbit
          environment:
            spring:
              rabbitmq:
                host: localhost
                port: 5672
                virtual-host: /
                ssl:
                  enabled: true
                  algorithm: algorithm
                  verify-hostname: true
                  key-store: file:/rabbit
                  key-store-password: keystorepassword
                  trust-store: file:/rabbit
                  trust-store-password: truststorepassword
                sasl:
                  enabled-mechanisms: EXTERNAL
                  config: EXTERNAL

额外注意事项 #

确保你的RabbitMQ服务器已配置支持EXTERNAL认证机制，且客户端证书已被服务器信任，否则即使客户端配置正确，仍会出现认证失败问题。

内容的提问来源于stack exchange，提问作者Dmitriy