Make anonymousAuthentication enabled by default

Signed-off-by: Andrey Litvitski <[email protected]>

Author: therepanic

config/src/integration-test/java/org/springframework/security/config/annotation/rsocket/AnonymousAuthenticationITests.java

@@ -121,6 +121,7 @@ PayloadSocketAcceptorInterceptor rsocketInterceptor(RSocketSecurity rsocket) {
 			ReactiveAuthorizationManager<PayloadExchangeAuthorizationContext> anonymous = (authentication,
 					exchange) -> authentication.map(trustResolver::isAnonymous).map(AuthorizationDecision::new);
 			rsocket.authorizePayload((authorize) -> authorize.anyExchange().access(anonymous));
+			rsocket.anonymousAuthentication((anonymousAuthentication) -> anonymousAuthentication.disable());
 			return rsocket.build();
 		}
 

config/src/integration-test/java/org/springframework/security/config/annotation/rsocket/RSocketMessageHandlerITests.java

@@ -268,8 +268,7 @@ PayloadSocketAcceptorInterceptor rsocketInterceptor(RSocketSecurity rsocket) {
 					.route("secure.*").authenticated()
 					.anyExchange().permitAll()
 				)
-				.basicAuthentication(Customizer.withDefaults())
-					.anonymousAuthentication(Customizer.withDefaults());
+				.basicAuthentication(Customizer.withDefaults());
 			// @formatter:on
 			return rsocket.build();
 		}

config/src/main/java/org/springframework/security/config/annotation/rsocket/RSocketSecurity.java

@@ -120,7 +120,7 @@ public class RSocketSecurity {
 
 	private SimpleAuthenticationSpec simpleAuthSpec;
 
-	private AnonymousAuthenticationSpec anonymousAuthSpec;
+	private AnonymousAuthenticationSpec anonymousAuthSpec = new AnonymousAuthenticationSpec(this);
 
 	private JwtSpec jwtSpec;
 
@@ -174,7 +174,7 @@ public RSocketSecurity simpleAuthentication(Customizer<SimpleAuthenticationSpec>
 	 */
 	public RSocketSecurity anonymousAuthentication(Customizer<AnonymousAuthenticationSpec> anonymous) {
 		if (this.anonymousAuthSpec == null) {
-			this.anonymousAuthSpec = new AnonymousAuthenticationSpec();
+			this.anonymousAuthSpec = new AnonymousAuthenticationSpec(this);
 		}
 		anonymous.customize(this.anonymousAuthSpec);
 		return this;
@@ -297,7 +297,10 @@ protected AuthenticationPayloadInterceptor build() {
 
 	public final class AnonymousAuthenticationSpec {
 
-		private AnonymousAuthenticationSpec() {
+		private RSocketSecurity parent;
+
+		private AnonymousAuthenticationSpec(RSocketSecurity parent) {
+			this.parent = parent;
 		}
 
 		protected AnonymousPayloadInterceptor build() {
@@ -306,6 +309,10 @@ protected AnonymousPayloadInterceptor build() {
 			return result;
 		}
 
+		public void disable() {
+			this.parent.anonymousAuthSpec = null;
+		}
+
 	}
 
 	public final class BasicAuthenticationSpec {