SpringBoot中使用Shiro注解模式无效

Question

已经在ShiroConfig中开启了注解模式

//开启shiro aop注解支持
    @Bean
    public AuthorizationAttributeSourceAdvisor authorizationAttributeSourceAdvisor(SecurityManager securityManager){
        System.out.println("开启了Shiro注解支持");
        AuthorizationAttributeSourceAdvisor authorizationAttributeSourceAdvisor = new AuthorizationAttributeSourceAdvisor();
        authorizationAttributeSourceAdvisor.setSecurityManager(securityManager);
        return authorizationAttributeSourceAdvisor;
    }

下面是使用注解部分的代码

@RequestMapping(method = RequestMethod.GET)
    @RequiresGuest
    public String list(){
        return "list:不需要权限验证";
    }


    @RequestMapping(method = RequestMethod.POST)
    @RequiresAuthentication
    public String save(){
        return "save:需要权限验证";
    }

但是访问post方法依然可以得到数据，之前并没有进行身份验证。
请问这是怎么回事？

Answer 1

还需要加上以下代码：

@Bean
    @ConditionalOnMissingBean
    public DefaultAdvisorAutoProxyCreator defaultAdvisorAutoProxyCreator() {
        DefaultAdvisorAutoProxyCreator defaultAAP = new DefaultAdvisorAutoProxyCreator();
        defaultAAP.setProxyTargetClass(true);
        return defaultAAP;
    }