Spring引導REST api實現自定義篩選器

Question

我試圖在春季啓動應用程序中將自定義篩選器應用於我的端點，但是無法更改我的響應狀態，但即使將其手動更改爲401，它也會返回200。

@Component 
public class AuthFilter extends GenericFilterBean { 

@Override 
public void doFilter(ServletRequest req, ServletResponse res, FilterChain chain) 
     throws IOException, ServletException { 

    HttpServletRequest request = ((HttpServletRequest) req); 
    HttpServletResponse response = ((HttpServletResponse) res); 

    String URI = request.getRequestURI(); 
    String authHeader = request.getHeader("Authorization"); 

    boolean endPoint = URI.startsWith("/auth/") || URI.startsWith("/resource/") || URI.startsWith("/project/") || URI.startsWith("/skill/"); 

    if(endPoint) { 
     if(authHeader == null || !authHeader.startsWith("Bearer")) { 
      response.setStatus(401); 
     } 
    } 
    chain.doFilter(request, response); 

    } 

} 

任何有關什麼可能會導致此問題的建議？

Answer 1

你可以拋出一個異常，並處理它回到這裏的401

if(endPoint) { 
    if(authHeader == null || !authHeader.startsWith("Bearer")) { 
     throw new ServletException("Invalid token."); // or your own exception to be handled 
    } 
} 

檢查如何處理異常：

https://spring.io/blog/2013/11/01/exception-handling-in-spring-mvc