Spring配置类导入失败及GlobalAuthenticationConfigurerAdapter找不到问题求助

我来帮你梳理下这两个问题的核心原因和解决办法：

一、为什么会找不到GlobalAuthenticationConfigurerAdapter？ #

这个问题几乎都是Spring Security OAuth2版本迭代导致的API变更：

• 旧版的spring-security-oauth2（已进入维护状态）里确实有GlobalAuthenticationConfigurerAdapter，但从Spring Security 5.x开始，官方重构了OAuth2模块，把授权服务器相关功能拆分到了spring-security-oauth2-authorization-server独立模块中，原来的GlobalAuthenticationConfigurerAdapter已经被移除或替换为新的API。

二、配置类导入候选失败的常见原因 #

这个问题通常和以下几点有关：

• 依赖版本不兼容，导致Spring无法识别配置类的注解或相关API
• 配置类所在的包不在Spring的组件扫描范围内
• 配置类上的注解使用错误（比如旧版的@EnableAuthorizationServer在新版里已不再适用）

三、具体解决步骤 #

1. 调整依赖版本（关键） #

根据你使用的Spring Boot版本，选择对应的OAuth2依赖：

• 如果坚持使用旧版维护中的OAuth2模块（不推荐），要确保Spring Boot和spring-security-oauth2版本匹配，比如Spring Boot 2.7.x对应spring-security-oauth2 2.5.x：

<!-- Maven依赖示例 -->
<dependency>
    <groupId>org.springframework.security.oauth</groupId>
    <artifactId>spring-security-oauth2</artifactId>
    <version>2.5.2.RELEASE</version>
</dependency>

• 推荐使用官方最新的授权服务器模块，比如Spring Boot 3.x对应spring-security-oauth2-authorization-server 1.2.x：

<dependency>
    <groupId>org.springframework.security</groupId>
    <artifactId>spring-security-oauth2-authorization-server</artifactId>
    <version>1.2.3</version>
</dependency>

2. 适配配置类写法 #

如果用新版授权服务器模块，原来继承AuthorizationServerConfigurerAdapter的写法要改成新的API：

旧版写法（已废弃）

package co.uk.zohaibkhan.config;

import org.springframework.context.annotation.Configuration;
import org.springframework.security.oauth2.config.annotation.configurers.ClientDetailsServiceConfigurer;
import org.springframework.security.oauth2.config.annotation.web.configuration.AuthorizationServerConfigurerAdapter;
import org.springframework.security.oauth2.config.annotation.web.configuration.EnableAuthorizationServer;

@Configuration
@EnableAuthorizationServer
public class AuthorizationServerConfig extends AuthorizationServerConfigurerAdapter {
    @Override
    public void configure(ClientDetailsServiceConfigurer clients) throws Exception {
        clients.inMemory()
                .withClient("my-client")
                .secret("{noop}my-secret")
                .authorizedGrantTypes("authorization_code")
                .scopes("read")
                .redirectUris("http://localhost:8080/callback");
    }
}

新版写法（推荐）

package co.uk.zohaibkhan.config;

import org.springframework.context.annotation.Bean;
import org.springframework.context.annotation.Configuration;
import org.springframework.security.config.annotation.web.builders.HttpSecurity;
import org.springframework.security.config.annotation.web.configuration.EnableWebSecurity;
import org.springframework.security.web.SecurityFilterChain;
import org.springframework.security.oauth2.server.authorization.config.annotation.web.configuration.OAuth2AuthorizationServerConfiguration;
import org.springframework.security.oauth2.server.authorization.config.annotation.web.configurers.OAuth2AuthorizationServerConfigurer;
import org.springframework.security.oauth2.client.registration.ClientRegistration;
import org.springframework.security.oauth2.client.registration.ClientRegistrationRepository;
import org.springframework.security.oauth2.client.registration.InMemoryClientRegistrationRepository;
import org.springframework.security.oauth2.client.InMemoryAuthorizedClientService;
import org.springframework.security.oauth2.client.AuthorizedClientService;
import org.springframework.security.oauth2.core.AuthorizationGrantType;

@Configuration
@EnableWebSecurity
public class SecurityConfig {

    // 配置授权服务器的安全过滤链
    @Bean
    @Order(1)
    public SecurityFilterChain authorizationServerSecurityFilterChain(HttpSecurity http) throws Exception {
        // 应用默认的授权服务器安全配置
        OAuth2AuthorizationServerConfiguration.applyDefaultSecurity(http);
        // 自定义客户端等配置
        http.getConfigurer(OAuth2AuthorizationServerConfigurer.class)
                .clientRegistrationRepository(clientRegistrationRepository())
                .authorizedClientService(authorizedClientService());
        return http.build();
    }

    // 注册客户端信息存储Bean（示例用内存存储，生产建议用数据库）
    @Bean
    public ClientRegistrationRepository clientRegistrationRepository() {
        ClientRegistration client = ClientRegistration.withRegistrationId("my-client")
                .clientId("my-client")
                .clientSecret("{noop}my-secret")
                .authorizationGrantType(AuthorizationGrantType.AUTHORIZATION_CODE)
                .redirectUri("http://localhost:8080/callback")
                .scope("read")
                .build();
        return new InMemoryClientRegistrationRepository(client);
    }

    // 注册授权客户端服务Bean
    @Bean
    public AuthorizedClientService authorizedClientService(ClientRegistrationRepository clientRegistrationRepository) {
        return new InMemoryAuthorizedClientService(clientRegistrationRepository);
    }
}

3. 解决配置类导入失败问题 #

• 确保你的配置类所在的包被Spring扫描到：检查主启动类上的@SpringBootApplication注解，如果配置类不在启动类的子包下，要手动指定扫描范围，比如@SpringBootApplication(scanBasePackages = "co.uk.zohaibkhan")
• 检查依赖冲突：用Maven命令mvn dependency:tree或者Gradle命令./gradlew dependencies查看依赖树，排除重复或冲突的Spring Security/OAuth2依赖

内容的提问来源于stack exchange，提问作者Zohaib Khan