User must be authenticated with Spring Security before authorization can be completed.
解决方案ResourceServerConfiguration和SecurityConfiguration上配置的顺序,SecurityConfiguration一定要在ResourceServerConfiguration之前,因为spring实现安全是通过添加过滤器(Filter)来实现的,基本的安全过滤应该在oauth过滤之前,所以在SecurityConfiguration设置@Order