java 401_java – Spring返回401而不是200状态

好.首先是第一件事

问题在这里

public SignedJWT authenticate(final String email,final String password){

try {

System.out.println("test => "+email+" : "+password);

Authentication authentication = authenticationManager

.authenticate(new UsernamePasswordAuthenticationToken(email,password));

SecurityContextHolder.getContext().setAuthentication(authentication);

if (authentication.getPrincipal() != null) {

return tokenManager.createNewToken((PrincipalUser) authentication.getPrincipal());

}

} catch (AuthenticationException authException) {

authException.printStackTrace();

LOGGER.debug("Authentication Failed for user:\"" + email + ".\" Reason " + authException.getClass());

}

System.out.println("return nulll");

return null;

}

如果运行测试用例,则会抛出以下错误

org.springframework.security.authentication.BadCredentialsException: Bad credentials

at org.springframework.security.authentication.dao.DaoAuthenticationProvider.additionalAuthenticationChecks(DaoAuthenticationProvider.java:98)

at org.springframework.security.authentication.dao.AbstractUserDetailsAuthenticationProvider.authenticate(AbstractUserDetailsAuthenticationProvider.java:166)

at org.springframework.security.authentication.ProviderManager.authenticate(ProviderManager.java:174)

at org.springframework.security.authentication.ProviderManager.authenticate(ProviderManager.java:199)

at org.springframework.security.config.annotation.web.configuration.WebSecurityConfigurerAdapter$AuthenticationManagerDelegator.authenticate(WebSecurityConfigurerAdapter.java:504)

at com.github.springjwt.security.jwt.service.AuthenticationServiceUsernamePassword.authenticate(AuthenticationServiceUsernamePassword.java:30)

at com.github.springjwt.web.api.controller.AuthController.authenticate(AuthController.java:31)

at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)

at sun.reflect.NativeMethodAccessorImp

这意味着您的测试用例的用户名和密码与UserRepository类用户详细信息不匹配

在您的UserRepository类中

您需要设置正确的哈希密码及其设置为null的盐值.

当您调用authenticate.authenticate时,它会在内部获取密码和哈希值,并将其与传递的值进行匹配.

如果值不匹配则抛出错误凭据错误

P.S：我在本地运行代码后得出了这个结论