在@Given步骤中设置测试安全上下文，而不是禁用安全性。
示例取自this README，我写的（当时Keycloak for Spring的适配器没有被弃用）：
小 cucumber 功能：

Feature: Testing a secured REST API
  Users should be able to GET greetings only if authenticated

  Scenario: Authorized users should be greeted
    Given the following user roles:
      | ROLE_user   |
      | ROLE_TESTER |
    When a get request is sent to greeting endpoint
    Then a greeting is returned

  Scenario: Unauthorized users should not be able to access greetings
    Given user is not authenticated
    When a get request is sent to greeting endpoint
    Then 401 is returned

字符串
下面使用了一些来自com.c4-soft.springaddons:spring-addons-oauth2-test的代码，这是我在maven-central上发布的一个库，以简化定义OpenID声明。如果您对索赔详细信息不感兴趣，则可以跳过此依赖关系（如果授权机构和用户名足够）：

public class JwtTestingBuilder {
    protected final OpenidClaimSetBuilder claimsBuilder;
    private final Set<String> authorities;
    private String bearerString = "machin.truc.chose";
    private Map<String, Object> headers = new HashMap<>(Map.of("machin", "truc"));

    public JwtTestingBuilder() {
        this.claimsBuilder = new OpenidClaimSetBuilder().subject(Defaults.SUBJECT).name(Defaults.AUTH_NAME);
        this.authorities = new HashSet<>(Defaults.AUTHORITIES);
    }

    public JwtAuthenticationToken build() {
        final var claims = claimsBuilder.build();
        final var iat = Instant.now();
        final var exp = iat.plusMillis(60000);
        final var jwt = new Jwt(bearerString, iat, exp, headers, claims);
        return new JwtAuthenticationToken(jwt, authorities.stream().map(SimpleGrantedAuthority::new).collect(Collectors.toSet()), claims.getName());
    }

    public JwtTestingBuilder authorities(String... authorities) {
        return authorities(Stream.of(authorities));
    }

    public JwtTestingBuilder authorities(Stream<String> authorities) {
        this.authorities.clear();
        this.authorities.addAll(authorities.toList());
        return this;
    }

    public JwtTestingBuilder claims(Consumer<OpenidClaimSetBuilder> tokenBuilderConsumer) {
        tokenBuilderConsumer.accept(claimsBuilder);
        return this;
    }

    public JwtTestingBuilder bearerString(String bearerString) {
        this.bearerString = bearerString;
        return this;
    }
}

型
步骤：

public class GreetingControllerSuite {

    @Autowired
    MockMvc mockMvc;

    MvcResult result;

    @Given("user is not authenticated")
    public void unauthenticatedUser() {
        TestSecurityContextHolder.clearContext();
    }

    @Given("the following user roles:")
    public void authenticateAsUser(List<String> rolesTable) {
        TestSecurityContextHolder.clearContext();
        final Stream<String> roles = rolesTable.stream().map(String::trim);
        TestSecurityContextHolder.setAuthentication(new JwtTestingBuilder().authorities(roles).build());
    }

    @When("a get request is sent to greeting endpoint")
    public void getGreet() throws Exception {
        result = mockMvc.perform(get("/greet")).andReturn();
    }

    @Then("401 is returned")
    public void unauthorizedStatus() throws Exception {
        assertEquals(401, result.getResponse().getStatus());
    }

    @Then("a greeting is returned")
    public void greetingIsReturned() throws Exception {
        assertEquals(200, result.getResponse().getStatus());
        final var body = result.getResponse().getContentAsString();
        assertThat(body.contains("Hello user! You are granted with "));
        assertThat(body.contains("ROLE_user"));
        assertThat(body.contains("ROLE_TESTER"));
    }
}

型
cucumber JUnit 4适配器：

import org.junit.runner.RunWith;

import io.cucumber.junit.Cucumber;
import io.cucumber.junit.CucumberOptions;

@RunWith(Cucumber.class)
@CucumberOptions(features = "classpath:cucumber-features", plugin = {
        "pretty",
        "html:target/cucumber" }, extraGlue = "com.c4_soft.springaddons.samples.webmvc.cucumber.extraglue")
public class CucumberIntegrationTest {
}

型
Spring“外胶”：

package com.c4_soft.springaddons.samples.webmvc.cucumber.extraglue;

...

@CucumberContextConfiguration
@SpringBootTest(webEnvironment = WebEnvironment.MOCK)
@ContextConfiguration(classes = { SpringBootSampleApp.class })
@AutoConfigureMockMvc
public static class CucumberSpringConfiguration {
}

型

解决方案之一是使用Mock impl，即类级别或方法级别的以下注解：
第一个月
For more details read it