SpringSecrurity AuthenticationProvider异常处理

最新推荐文章于 2022-12-20 15:27:45 发布

为了那份宁静

最新推荐文章于 2022-12-20 15:27:45 发布

阅读量602

点赞数

分类专栏： Spring 文章标签： servlet java 开发语言

本文链接：https://blog.csdn.net/linhaiguo/article/details/125779547

版权

Spring 专栏收录该内容

11 篇文章 0 订阅

订阅专栏

程序设置的全局异常是捕获不到AuthenticationProvider 抛出的异常的，前后端分离后，前端接收到的异常就不是可用的异常信息，那这个时候应该怎么处理异常呢？

1.重写 BasicAuthenticationEntryPoint 类的 commence(HttpServletRequest request, HttpServletResponse response, AuthenticationException authEx)


@Component
@Slf4j
public class KstBasicAuthenticationEntryPoint extends BasicAuthenticationEntryPoint {

	@Override
	public void commence(HttpServletRequest request, HttpServletResponse response, AuthenticationException authEx)
			throws IOException, ServletException {
		response.setStatus(HttpServletResponse.SC_UNAUTHORIZED);
		response.setCharacterEncoding("UTF-8");
		response.setContentType("application/json; charset=utf-8");
		PrintWriter writer = response.getWriter();
		ObjectMapper objectMapper = new ObjectMapper();
		Map<String, String> map = new HashMap<>();
		String[] errMsg = StringUtils.split(StringUtils.defaultString(authEx.getMessage()), ":");
		log.error("用户authentication认证异常:",authEx);
		if (errMsg.length == 2) {
			map.put("code","1");
			map.put("status", errMsg[0]);
			map.put("message", errMsg[1]);
		} else {
			map.put("code","1");
			map.put("status", "1");
			map.put("message"," 错误-未授权");
		}
		
		writer.println(objectMapper.writeValueAsString(map));
		
	}

	@Override
	public void afterPropertiesSet() throws Exception {
		super.afterPropertiesSet();
	}
}

2.完