Register Authorization Proxied Type

Closes gh-16106

Author: jzheaux

core/src/main/java/org/springframework/security/aot/hint/AuthorizeReturnObjectHintsRegistrar.java

@@ -119,8 +119,10 @@ private void registerProxy(RuntimeHints hints, Class<?> clazz) {
 		}
 		if (SpringProxy.class.isAssignableFrom(proxied)) {
 			hints.reflection()
-				.registerType(proxied, MemberCategory.INVOKE_PUBLIC_METHODS, MemberCategory.PUBLIC_FIELDS,
-						MemberCategory.DECLARED_FIELDS);
+				.registerType(clazz, MemberCategory.INVOKE_DECLARED_CONSTRUCTORS,
+						MemberCategory.INVOKE_DECLARED_METHODS)
+				.registerType(proxied, MemberCategory.INVOKE_DECLARED_CONSTRUCTORS,
+						MemberCategory.INVOKE_DECLARED_METHODS, MemberCategory.DECLARED_FIELDS);
 		}
 	}
 

core/src/test/java/org/springframework/security/aot/hint/AuthorizeReturnObjectCoreHintsRegistrarTests.java

@@ -46,8 +46,9 @@ public void registerHintsWhenUsingAuthorizeReturnObjectThenRegisters() {
 		context.refresh();
 		RuntimeHints hints = new RuntimeHints();
 		this.registrar.registerHints(hints, context.getBeanFactory());
-		assertThat(hints.reflection().typeHints().map((hint) -> hint.getType().getName()))
-			.containsOnly(cglibClassName(MyObject.class), cglibClassName(MySubObject.class));
+		assertThat(hints.reflection().typeHints().map((hint) -> hint.getType().getName())).containsOnly(
+				cglibClassName(MyObject.class), cglibClassName(MySubObject.class), MyObject.class.getName(),
+				MySubObject.class.getName());
 		assertThat(hints.proxies()
 			.jdkProxyHints()
 			.flatMap((hint) -> hint.getProxiedInterfaces().stream())

core/src/test/java/org/springframework/security/aot/hint/AuthorizeReturnObjectHintsRegistrarTests.java

@@ -40,7 +40,7 @@ public void registerHintsWhenSpecifiedThenRegisters() {
 		RuntimeHints hints = new RuntimeHints();
 		registrar.registerHints(hints, null);
 		assertThat(hints.reflection().typeHints().map((hint) -> hint.getType().getName()))
-			.containsOnly(cglibClassName(MyObject.class));
+			.containsOnly(cglibClassName(MyObject.class), MyObject.class.getName());
 		assertThat(hints.proxies()
 			.jdkProxyHints()
 			.flatMap((hint) -> hint.getProxiedInterfaces().stream())