com.yishuifengxiao.common.security.endpoint

Class ExceptionAuthenticationEntryPoint

java.lang.Object

org.springframework.security.web.authentication.Http403ForbiddenEntryPoint

com.yishuifengxiao.common.security.endpoint.ExceptionAuthenticationEntryPoint

All Implemented Interfaces:

org.springframework.security.web.AuthenticationEntryPoint

public class ExceptionAuthenticationEntryPoint
extends org.springframework.security.web.authentication.Http403ForbiddenEntryPoint

当参数中不存在token时的提示信息 处理器

主要解决不存在access_token导致401的问题

参见 https://www.cnblogs.com/mxmbk/p/9782409.html 该类主要解决以下问题：

 
 问题：测试发现授权接口，当请求参数中不存在access_token时发现接口返回错误信息：
               {"timestamp":1539337154336,"status":401,"error":"Unauthorized","message":"No message available","path":"/app/businessCode/list"}
 
   排查：经过前面的分析发现，上面提到Security的FilterSecurityInterceptor对OAuth2中返回的信息和本身配置校验后，抛出AccessDenyException。
 
  解决：经过上面的几个问题的处理，发现思路还是一样的，需要定义响应结果，
 
                 即1、自定义响应处理逻辑SecurityAuthenticationEntryPoint 2、自定义处理逻辑SecurityAuthenticationEntryPoint生效（见上面的配置）
 
 

该配置会被被两处配置收集：

• 在ExceptionAuthorizeProvider中被配置为异常处理方式
• 在HttpBasicAuthorizeProvider中被配置为异常处理方式
• 被Oauth2Resource收集，然后经public void configure(ResourceServerSecurityConfigurer resources) 注入到oauth2中
• 被Oauth2Server收集，然后经public void configure(AuthorizationServerSecurityConfigurer security)注入到oauth2中

Since:

1.0.0

Version:

1.0.0

Author:

yishui

See Also:

HttpBasicAuthorizeProvider, ExceptionAuthorizeProvider, Oauth2Resource, Oauth2Server

Constructor Summary

Constructors

Constructor and Description
ExceptionAuthenticationEntryPoint()

Method Summary

Modifier and Type	Method and Description
void	commence(javax.servlet.http.HttpServletRequest request, javax.servlet.http.HttpServletResponse response, org.springframework.security.core.AuthenticationException authException)
HandlerProcessor	getHandlerProcessor()
PropertyResource	getPropertyResource()
void	setHandlerProcessor(HandlerProcessor handlerProcessor)
void	setPropertyResource(PropertyResource propertyResource)

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

ExceptionAuthenticationEntryPoint

public ExceptionAuthenticationEntryPoint()

Method Detail

commence

public void commence(javax.servlet.http.HttpServletRequest request,
                     javax.servlet.http.HttpServletResponse response,
                     org.springframework.security.core.AuthenticationException authException)
              throws IOException

Specified by:

commence in interface org.springframework.security.web.AuthenticationEntryPoint

Overrides:

commence in class org.springframework.security.web.authentication.Http403ForbiddenEntryPoint

Throws:

IOException

getHandlerProcessor

public HandlerProcessor getHandlerProcessor()

setHandlerProcessor

public void setHandlerProcessor(HandlerProcessor handlerProcessor)

getPropertyResource

public PropertyResource getPropertyResource()

setPropertyResource

public void setPropertyResource(PropertyResource propertyResource)