Document that Method Security Co-routine Support Skips Downstream Interceptors

[jzheaux]

Related to spring-projects/spring-framework#22462 (comment) - PrePostAdviceMethodInterceptor is limiting in its co-routine support in that to make it work it calls CoroutineUtils.invokeSuspendFunction instead of MethodInterceptor.proceed, effectively skipping downstream interceptors.

This can be addressed by ensuring that Spring Security's reactive method interceptor should come last.

Both the limitation and the workaround should be documented.

Hello, I would like to take this task, if that's alright