OAuth: ClientDetailsService @PostConstruct method called twice

Summary

We've added a @PostContruct method called init(), to our ClientDetailsService implementation. We then observe that init() is called twice: once on launch of the application during context creation, and once when the ClientDetailsService is first accessed by the token endpoints. Further calls to ClientDetailsService do not elicit calls to init(). The problem is that we have logic in the init() method that we want called exactly once.

Actual Behavior

OurClientDetailsServiceImpl.init() called twice, once on launch of the application during context creation, and once when the ClientDetailsService is first accessed by the token endpoints.

Expected Behavior

OurClientDetailsServiceImpl.init() called once on launch of the application during context creation.

Configuration

Configuration file is contained in sample repository below. The environment is as follows

• Java v. 1.8
• macOS Sierra v. 10.12.3

Version

Spring-Boot 1.5.2, and the corresponding spring-boot-security and spring-security-oauth versions.

Sample

The following code sample can be used to recreate the issue. The issue can be reproduced by building the project, running it, and issuing the following command in the terminal: curl acme:acmesecret@localhost:8080/oauth/token -d grant_type=password -d username=user -d password=password.

Also, thanks for your awesome work, and for your help.

Start with the linked spring-oauth-issue-sample and reproduce the behavior by launching the application, then calling the /oauth/token endpoint with the supplied curl command. Trace the ClientDetailsService access during context creation and the first token request; done means the implementation's init() method is called exactly once.