Feign请求头透传Accept引发的问题

背景

    团队内某小伙伴开发了一个功能，微信扫描二维码，后端返回HTML页面；

    涉及2个服务：某业务服务A，基础服务B

    扫描请求业务服务A的接口，然后内部feign调用基础服务B的某接口；

现象

    调用基础服务B时，feign抛出以下异常：

feign.codec.DecodeException: Error while extracting response for type [cn.q***.web.response.ObjectResponse<java.util.List<cn.q***.e*****.portal.vo.AcountVO>>] and content type [application/xhtml+xml]; 
nested exception is org.springframework.http.converter.HttpMessageNotReadableException: JSON parse error: Cannot construct instance of `cn.q***.e*****.portal.vo.AcountVO` (although at least one Creator exists): 
no String-argument constructor/factory method to deserialize from String value ('177********'); nested exception is com.fasterxml.jackson.databind.exc.MismatchedInputException: 
Cannot construct instance of `cn.q***.e*****.portal.vo.AcountVO` (although at least one Creator exists): 
no String-argument constructor/factory method to deserialize from String value ('177********')
 at [Source: (org.springframework.util.StreamUtils$NonClosingInputStream); line: 1, column: 43] (through reference chain: cn.q***.web.response.ObjectResponse["data"]->java.util.ArrayList[0])
    at feign.InvocationContext.proceed(InvocationContext.java:40)
    at feign.AsyncResponseHandler.decode(AsyncResponseHandler.java:116)
    at feign.AsyncResponseHandler.handleResponse(AsyncResponseHandler.java:89)
    at feign.SynchronousMethodHandler.executeAndDecode(SynchronousMethodHandler.java:141)
    at feign.SynchronousMethodHandler.invoke(SynchronousMethodHandler.java:91)
    at com.alibaba.cloud.sentinel.feign.SentinelInvocationHandler.invoke(SentinelInvocationHandler.java:109)
	...省略...
Caused by: org.springframework.web.client.RestClientException: Error while extracting response for type [cn.q***.web.response.ObjectResponse<java.util.List<cn.q***.e*****.portal.vo.AcountVO>>] and content type [application/xhtml+xml]; 
nested exception is org.springframework.http.converter.HttpMessageNotReadableException: JSON parse error: Cannot construct instance of `cn.q***.e*****.portal.vo.AcountVO` (although at least one Creator exists): 
no String-argument constructor/factory method to deserialize from String value ('177********'); nested exception is com.fasterxml.jackson.databind.exc.MismatchedInputException: 
Cannot construct instance of `cn.q***.e*****.portal.vo.AcountVO` (although at least one Creator exists): no String-argument constructor/factory method to deserialize from String value ('177********')
 at [Source: (org.springframework.util.StreamUtils$NonClosingInputStream); line: 1, column: 43] (through reference chain: cn.q***.web.response.ObjectResponse["data"]->java.util.ArrayList[0])
    at org.springframework.web.client.HttpMessageConverterExtractor.extractData(HttpMessageConverterExtractor.java:120)
    at org.springframework.cloud.openfeign.support.SpringDecoder.decode(SpringDecoder.java:75)
    at org.springframework.cloud.openfeign.support.ResponseEntityDecoder.decode(ResponseEntityDecoder.java:61)
    at feign.optionals.OptionalDecoder.decode(OptionalDecoder.java:36)
    at feign.InvocationContext.proceed(InvocationContext.java:36)
    ... 124 common frames omitted
Caused by: org.springframework.http.converter.HttpMessageNotReadableException: JSON parse error: Cannot construct instance of `cn.q***.e*****.portal.vo.AcountVO` (although at least one Creator exists): 
no String-argument constructor/factory method to deserialize from String value ('177********'); 
nested exception is com.fasterxml.jackson.databind.exc.MismatchedInputException: 
Cannot construct instance of `cn.q***.e*****.portal.vo.AcountVO` (although at least one Creator exists): no String-argument constructor/factory method to deserialize from String value ('177********')
 at [Source: (org.springframework.util.StreamUtils$NonClosingInputStream); line: 1, column: 43] (through reference chain: cn.q***.web.response.ObjectResponse["data"]->java.util.ArrayList[0])
    at org.springframework.http.converter.json.AbstractJackson2HttpMessageConverter.readJavaType(AbstractJackson2HttpMessageConverter.java:391)
    at org.springframework.http.converter.json.AbstractJackson2HttpMessageConverter.read(AbstractJackson2HttpMessageConverter.java:343)
    at org.springframework.web.client.HttpMessageConverterExtractor.extractData(HttpMessageConverterExtractor.java:105)
    ... 128 common frames omitted
Caused by: com.fasterxml.jackson.databind.exc.MismatchedInputException: Cannot construct instance of `cn.q***.e*****.portal.vo.AcountVO` (although at least one Creator exists): 
no String-argument constructor/factory method to deserialize from String value ('177********')
 at [Source: (org.springframework.util.StreamUtils$NonClosingInputStream); line: 1, column: 43] (through reference chain: cn.q***.web.response.ObjectResponse["data"]->java.util.ArrayList[0])
    at com.fasterxml.jackson.databind.exc.MismatchedInputException.from(MismatchedInputException.java:63)
    at com.fasterxml.jackson.databind.DeserializationContext.reportInputMismatch(DeserializationContext.java:1728)
    at com.fasterxml.jackson.databind.DeserializationContext.handleMissingInstantiator(DeserializationContext.java:1353)
    at com.fasterxml.jackson.databind.deser.std.StdDeserializer._deserializeFromString(StdDeserializer.java:311)
    at com.fasterxml.jackson.databind.deser.BeanDeserializerBase.deserializeFromString(BeanDeserializerBase.java:1495)
    at com.fasterxml.jackson.databind.deser.BeanDeserializer._deserializeOther(BeanDeserializer.java:197)
    at com.fasterxml.jackson.databind.deser.BeanDeserializer.deserialize(BeanDeserializer.java:187)
    at com.fasterxml.jackson.databind.deser.std.CollectionDeserializer._deserializeFromArray(CollectionDeserializer.java:355)
    at com.fasterxml.jackson.databind.deser.std.CollectionDeserializer.deserialize(CollectionDeserializer.java:244)
    at com.fasterxml.jackson.databind.deser.std.CollectionDeserializer.deserialize(CollectionDeserializer.java:28)
    at com.fasterxml.jackson.databind.deser.impl.MethodProperty.deserializeAndSet(MethodProperty.java:129)
    at com.fasterxml.jackson.databind.deser.BeanDeserializer.deserializeFromObject(BeanDeserializer.java:392)
    at com.fasterxml.jackson.databind.deser.BeanDeserializer.deserialize(BeanDeserializer.java:185)
    at com.fasterxml.jackson.dataformat.xml.deser.XmlDeserializationContext.readRootValue(XmlDeserializationContext.java:91)
    at com.fasterxml.jackson.databind.ObjectMapper._readMapAndClose(ObjectMapper.java:4674)
    at com.fasterxml.jackson.databind.ObjectMapper.readValue(ObjectMapper.java:3682)
    at org.springframework.http.converter.json.AbstractJackson2HttpMessageConverter.readJavaType(AbstractJackson2HttpMessageConverter.java:380)
    ... 130 common frames omitted

定位

    一开始小伙伴没说清楚现象；

    刚开始走了点弯路，以为那个版本缺少默认构造器；

    拉下来class反编译之后，发现并不是这个问题；

    用apifox工具请求未复现；

    后来发现微信扫码触发请求其实必现的；

    那就肯定是请求头区别，微信扫码触发GET请求，请求头如下：

Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.9

    跟了一下源码，发现问题；

原因

    feign 透传accept请求头，导致问题；

    内部存在自定义拦截器，该拦截器将所有请求头都转发到下游服务；（很明显该拦截器实现有问题）

    Accept请求头的透传，导致内服调用返回数据格式为xml，反序列化时异常；

    Accept请求头：描述客户端希望接收的响应body 数据类型。就是希望服务器返回什么类型的数据。

解决

    类似Accpet\Content-Type\Content-Length这类请求头的往下透传，没有意义而且可能会导致问题；

    应该只透传Authorization、User-Agent、用户真实IP、当前会话相关等请求头

    请求头的透传需要根据具体的代码架构，如果只在网关鉴权，那么Authorization就不需要往下透传，只需要透传解析后的当前用户信息；