如何發送春天

Question

我在我的應用程序中實現春季安全與JWT我自己的反應，當過未經授權的呼叫時，它返回以下響應

@Override 
    public void commence(HttpServletRequest request, 
         HttpServletResponse response, 
         AuthenticationException authException) throws IOException { 

     response.sendError(HttpServletResponse.SC_UNAUTHORIZED, "Unauthorized"); 
    } 

響應JSON看起來像下面

{ 
"timestamp": 1497832267379, 
"status": 401, 
"error": "Unauthorized", 
"message": "Unauthorized", 
"path": "/path" 
} 

取而代之的是，我可以送自己的自定義響應somethink喜歡：

{ 
"code":401, 
"message":"The request is unauthorized" 

} 

任何幫助表示讚賞

編輯

我的代碼更新到以下格式：

@Override 
    public void commence(HttpServletRequest request, 
         HttpServletResponse response, 
         AuthenticationException authException) throws IOException { 

       //response.sendError(HttpServletResponse.SC_UNAUTHORIZED, "Unauthorized"); 



       status UnautorizedEntry = new status(); 
       UnautorizedEntry.setCode(401); 
       UnautorizedEntry.setMessage("Unauthorized Entry"); 
       Map<String, Object> UnautorizedEntryResponse=new HashMap<String, Object>(); 
       UnautorizedEntryResponse.put("status", UnautorizedEntry); 
       objectMapper.writeValue(response.getOutputStream(), UnautorizedEntry); 
       response.flushBuffer(); 



    } 

我的狀態類如下：

public class status { 

    int code; 
    String message; 
    public int getCode() { 
     return code; 
    } 
    public void setCode(int code) { 
     this.code = code; 
    } 
    public String getMessage() { 
     return message; 
    } 
    public void setMessage(String message) { 
     this.message = message; 
    } 



} 

現在我得到一個200迴應，但沒有在屏幕上顯示。它完全blank.Any幫助表示讚賞

Answer 1

你可以嘗試添加控制器建議

@RestController 
@ControllerAdvice 
public class ExceptionHandlerController { 

    @ExceptionHandler(UsernameNotFoundException.class, DataAccessException.class) 
    @ResponseStatus(HttpStatus.SC_UNAUTHORIZED) 
    @ResponseBody ErrorInfo 
    UnauthorizeExceptionInfo(HttpServletRequest req, Exception ex) { 
     return new ErrorInfo(req.getRequestURL(), ex); 
    } 
} 

和ErrorInfo.class

@JsonIgnore 
public final StringBuffer url; 
public final String ex; 

public ErrorInfo(StringBuffer stringBuffer, Exception ex) { 
    this.url = stringBuffer; 
    this.ex = ex.getLocalizedMessage(); 
} 

並且當您將拋出新的UsernameNotFoundException時，控制器將處理響應。

我想如果密碼/電子郵件不匹配，異常將拋出CustomUserDetailsS​​ervice的@Override public loadUserByUsername。

更多細節在這裏：https://spring.io/blog/2013/11/01/exception-handling-in-spring-mvc

Answer 2

這應該爲你工作：

@Autowired 
private ObjectMapper objectMapper; 

@Override 
public void commence(HttpServletRequest request, 
        HttpServletResponse response, 
        AuthenticationException authException) throws IOException { 
    // notify client of response body content type 
    response.addHeader("Content-Type", "application/json;charset=UTF-8"); 
    // set the response status code 
    response.setStatus(HttpServletResponse.SC_UNAUTHORIZED); 
    // set up the response body 
    Status unauthorized = new Status(HttpServletResponse.SC_UNAUTHORIZED, 
            "The request is unauthorized"); 
    // write the response body 
    objectMapper.writeValue(response.getOutputStream(), unauthorized); 
    // commit the response 
    response.flushBuffer(); 
} 

public class Status { 
    private int code; 
    private String message; 

    public Status(int code, String message) { 
     this.code = code; 
     this.message = message; 
    } 

    public int getCode() { 
     return code; 
    } 

    public String getMessage() { 
     return message; 
    } 
} 

請注意，您需要