浅谈SpringSecurity注解与AOP切面执行顺序

@Controller
public class HelloController{
	@RequestMapping(value = "/hello")
	@BeforeController
	@PreAuthorize("validate(#user)")
	public void hello(@RequestParam("user) String user) {
		// 业务代码 
	}
}

@Documented
@Target(ElementType.METHOD)
@Retention(RetentionPolicy.RUNTIME)
public @interface BeforeController {
}

@Aspect
@Component
@Order(0)
public class BeforeControllerAction {
    @Before("@annotation(org.numb.web.aop.BeforeController)")
    public void before(final JoinPoint joinPoint) {
        // before切面业务代码
    }
}

@Aspect
@Component
public class BeforeControllerAction implements Ordered {
    @Before("@annotation(org.numb.web.aop.BeforeController)")
    public void before(final JoinPoint joinPoint) {
        // before切面业务代码
    }
    @Override
    public int getOrder() {
        return 0;
    }
}

<aop:config expose-proxy="true">
    <aop:pointcut id="beforeController" expression="@annotation(org.numb.web.aop.BeforeController)"/>
    <aop:aspect ref="beforeControllerAction" id="beforeControllerAction">
        <aop:before method="before" pointcut-ref="beforeController"/>
    </aop:aspect>
</aop:config>

@EnableGlobalMethodSecurity(order = 0)

public @interface EnableGlobalMethodSecurity {
	/**
	 * Indicate the ordering of the execution of the security advisor when multiple
	 * advices are applied at a specific joinpoint. The default is
	 * {@link Ordered#LOWEST_PRECEDENCE}.
	 * @return the order the security advisor should be applied
	 */
	int order() default Ordered.LOWEST_PRECEDENCE;
}