🏁 Script executed:

#!/bin/bash
set -euo pipefail

fd -HI -t f '.*Security.*\.java' src/main/java src/test/java
rg -n -C3 '`@AuthenticationPrincipal`|authorizeHttpRequests|requestMatchers|SecurityFilterChain|setPrincipal|Authentication' \
  src/main/java src/test/java

Repository: Leets-Official/TDD-BE

Length of output: 50377

🏁 Script executed:

#!/bin/bash
set -euo pipefail

echo "== candidate files =="
fd -HI -t f '.*(UserPrincipal|DeliveryPartyController|DeliveryPartyControllerTest|SecurityConfig).java' src/main/java src/test/java

echo "== DeliveryPartyController relevant section =="
cat -n src/main/java/com/leets/tdd/party/controller/DeliveryPartyController.java | sed -n '1,140p'

echo "== SecurityConfig =="
cat -n src/main/java/com/leets/tdd/global/config/SecurityConfig.java

echo "== JwtAuthenticationFilter relevant section =="
cat -n src/main/java/com/leets/tdd/global/config/JwtAuthenticationFilter.java | sed -n '1,115p'

echo "== UserPrincipal def/classpath search =="
rg -n -C5 'class UserPrincipal|record UserPrincipal|UserPrincipal' src/main/java src/test/java | head -n 200

echo "== DeliveryPartyControllerTest files =="
fd -HI -t f 'DeliveryPartyControllerTest.java' src/test/java -x sh -c 'echo "--- $1"; sed -n "1,220p" "$1"' sh {}

Repository: Leets-Official/TDD-BE

Length of output: 35002

🌐 Web query:

Spring Security @AuthenticationPrincipal Long principal needs SecurityContext AuthenticationPrincipalArgumentResolver converter Long

💡 Result:

In Spring Security, the @AuthenticationPrincipal annotation relies on the AuthenticationPrincipalArgumentResolver to resolve the principal from the SecurityContext to a method argument [1][2]. When attempting to use @AuthenticationPrincipal directly with a Long or primitive long, you may encounter issues because the resolver checks if the principal is assignable to the requested parameter type [3][4]. Important technical constraints: 1. Primitive Types Not Supported: You cannot use primitive types (e.g., long) as arguments for @AuthenticationPrincipal, as these are not considered assignable from the object stored in the SecurityContext, which is typically a wrapper type or custom object [3][4]. Even if the underlying principal is a Long, using a primitive long parameter often causes errors or results in a null value [4]. 2. Type Mismatch: If the principal stored in the SecurityContext is not directly assignable to the type requested in your controller (e.g., you are trying to inject a Long but the principal is a custom UserDetails object), the resolver will return null by default [1][5]. If you set errorOnInvalidType = true in the annotation, it will throw a ClassCastException [1][6]. Recommended Approaches: If your principal object is a custom user class and you simply need to extract a Long ID: 1. Use a SpEL Expression: You can use the expression attribute of @AuthenticationPrincipal to navigate to the desired field [6][2]. If your principal has a getId method, you can use: @AuthenticationPrincipal(expression = "id") Long userId 2. Use a Custom Meta-Annotation or Argument Resolver: If you need more complex conversion logic that SpEL cannot handle, you should create a custom argument resolver. You can implement the HandlerMethodArgumentResolver interface to inspect the security context and perform manual conversion of the principal to your desired Long type. 3. Controller Logic: Alternatively, inject the full principal object (e.g., @AuthenticationPrincipal CustomUser user) and retrieve the ID inside your method body using user.getId. This is often the cleanest and most readable approach [2]. If you are encountering specific errors with Long conversion, ensure that the object stored in your Authentication principal is indeed the type you expect (e.g., verify that principal is not a UserDetails wrapper when you are expecting a raw Long) [1][7].

Citations:

• 1: https://docs.spring.io/spring-security/reference/api/java/org/springframework/security/web/method/annotation/AuthenticationPrincipalArgumentResolver.html
• 2: https://docs.spring.io/spring-security/reference/servlet/integrations/mvc.html
• 3: Exception using @AuthenticationPrincipal with primitive parameters spring-projects/spring-security#4245
• 4: AuthenticationPrincipal argument type cannot be primitive spring-projects/spring-security#10172
• 5: https://github.com/spring-projects/spring-security/blob/master/web/src/main/java/org/springframework/security/web/bind/support/AuthenticationPrincipalArgumentResolver.java
• 6: https://docs.spring.io/spring-security/reference/api/java/org/springframework/security/core/annotation/AuthenticationPrincipal.html
• 7: Spring Session integration do not supports primitive type as the principal spring-projects/spring-security#6571