2016-01-22 17 views
2

我能夠通過restful調用與我的後端與我的AngularJS應用程序進行通信。 JAX-RS呼叫可以工作,例如登錄或從後端獲取數據。這是因爲我必須在應用程序中CORSResponseFilterJAX-RS請求異常期間出現「No」Access-Control-Allow-Origin'header'錯誤

@Provider  
public class CORSResponseFilter implements ContainerResponseFilter { 
    @Override 
    public void filter(ContainerRequestContext requestCtx, ContainerResponseContext responseCtx) throws IOException { 
     responseCtx.getHeaders().add("Access-Control-Allow-Origin", "*"); 
     responseCtx.getHeaders().add("Access-Control-Allow-Credentials", "true"); 
     responseCtx.getHeaders().add("Access-Control-Allow-Methods", "GET, POST, DELETE, PUT"); 
     responseCtx.getHeaders().add("Access-Control-Allow-Headers", "Content-Type, Access-Control-Allow-Headers, Authorization, X-Requested-With"); 
    } 
} 

我的問題是,當出現錯誤的JAX-RS調用。如果有一個內部服務器錯誤或BadRequest拋出異常前端與迴應:

否「訪問控制允許來源」標頭出現在所請求的資源。原因'http://localhost:9000'因此不允許 訪問。響應有HTTP狀態代碼500。

在GlassFish日誌,但是我得到:

警告:StandardWrapperValve [ServletAdaptor]:Servlet.service()進行的servlet ServletAdaptor拋出異常 org.project。 dashboard.exceptions.BadRequestException:(400):無效的日期格式應爲YYYY-MM-DD

正如你可以在GlassFish日誌中看到,除了被映射到正確的錯誤和響應代碼,但是那並不不會滲透儘量到前端。我只能得到「否」訪問控制允許源頭「錯誤。當響應代碼爲200


UPDATE

ResponseFilter使用時有沒有拋出的異常,但是當有那麼ResponseFilter沒有觸及我沒有收到此錯誤。

這裏是我的例外映射這可能導致該問題的代碼:

@Provider 
public class DashboardExceptionMapper implements ExceptionMapper<DashboardException> { 

@Override 
public Response toResponse(DashboardException e) { 
    ErrorMessage error = new ErrorMessage(); 
    error.setStatus(e.getHttpStatusCode()); 
    error.setCode(e.getClass().getSimpleName()); 
    error.setMessage(e.getShortMessage()); 

    return Response.status(e.getHttpStatusCode()).entity(error) 
      .build(); 
} 
} 

更新2

代碼所拋出的異常:

public class BadRequestException extends DashboardException{ 
private static final long serialVersionUID = 1L; 

public BadRequestException(String message) { 
    super(HttpURLConnection.HTTP_BAD_REQUEST, message); 
} 

} 

更新3

請求完全的堆棧是一個例外的痕跡:

 Warning: StandardWrapperValve[ServletAdaptor]: Servlet.service() for servlet ServletAdaptor threw exception 
    org..dashboard.exceptions.AuthenticationException: (403) : An invalid sessionID has been provided 
     at org..dashboard.exposed.DashboardREST.getRoutes(DashboardREST.java:330) 
     at sun.reflect.GeneratedMethodAccessor191.invoke(Unknown Source) 
     at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43) 
     at java.lang.reflect.Method.invoke(Method.java:497) 
     at org.glassfish.ejb.security.application.EJBSecurityManager.runMethod(EJBSecurityManager.java:1081) 
     at org.glassfish.ejb.security.application.EJBSecurityManager.invoke(EJBSecurityManager.java:1153) 
     at com.sun.ejb.containers.BaseContainer.invokeBeanMethod(BaseContainer.java:4695) 
     at com.sun.ejb.EjbInvocation.invokeBeanMethod(EjbInvocation.java:630) 
     at com.sun.ejb.containers.interceptors.AroundInvokeChainImpl.invokeNext(InterceptorManager.java:822) 
     at com.sun.ejb.EjbInvocation.proceed(EjbInvocation.java:582) 
     at org.jboss.weld.ejb.AbstractEJBRequestScopeActivationInterceptor.aroundInvoke(AbstractEJBRequestScopeActivationInterceptor.java:46) 
     at sun.reflect.GeneratedMethodAccessor170.invoke(Unknown Source) 
     at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43) 
     at java.lang.reflect.Method.invoke(Method.java:497) 
     at com.sun.ejb.containers.interceptors.AroundInvokeInterceptor.intercept(InterceptorManager.java:883) 
     at com.sun.ejb.containers.interceptors.AroundInvokeChainImpl.invokeNext(InterceptorManager.java:822) 
     at com.sun.ejb.EjbInvocation.proceed(EjbInvocation.java:582) 
     at com.sun.ejb.containers.interceptors.SystemInterceptorProxy.doCall(SystemInterceptorProxy.java:163) 
     at com.sun.ejb.containers.interceptors.SystemInterceptorProxy.aroundInvoke(SystemInterceptorProxy.java:140) 
     at sun.reflect.GeneratedMethodAccessor172.invoke(Unknown Source) 
     at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43) 
     at java.lang.reflect.Method.invoke(Method.java:497) 
     at com.sun.ejb.containers.interceptors.AroundInvokeInterceptor.intercept(InterceptorManager.java:883) 
     at com.sun.ejb.containers.interceptors.AroundInvokeChainImpl.invokeNext(InterceptorManager.java:822) 
     at com.sun.ejb.containers.interceptors.InterceptorManager.intercept(InterceptorManager.java:369) 
     at com.sun.ejb.containers.BaseContainer.__intercept(BaseContainer.java:4667) 
     at com.sun.ejb.containers.BaseContainer.intercept(BaseContainer.java:4655) 
     at com.sun.ejb.containers.EJBLocalObjectInvocationHandler.invoke(EJBLocalObjectInvocationHandler.java:212) 
     at com.sun.ejb.containers.EJBLocalObjectInvocationHandlerDelegate.invoke(EJBLocalObjectInvocationHandlerDelegate.java:88) 
     at com.sun.proxy.$Proxy414.getRoutes(Unknown Source) 
     at org.dashboard.exposed.__EJB31_Generated__DashboardREST__Intf____Bean__.getRoutes(Unknown Source) 
     at sun.reflect.GeneratedMethodAccessor191.invoke(Unknown Source) 
     at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43) 
     at java.lang.reflect.Method.invoke(Method.java:497) 
     at org.glassfish.jersey.server.model.internal.ResourceMethodInvocationHandlerFactory$1.invoke(ResourceMethodInvocationHandlerFactory.java:81) 
     at org.glassfish.jersey.server.model.internal.AbstractJavaResourceMethodDispatcher.invoke(AbstractJavaResourceMethodDispatcher.java:125) 
     at org.glassfish.jersey.server.model.internal.JavaResourceMethodDispatcherProvider$TypeOutInvoker.doDispatch(JavaResourceMethodDispatcherProvider.java:195) 
     at org.glassfish.jersey.server.model.internal.AbstractJavaResourceMethodDispatcher.dispatch(AbstractJavaResourceMethodDispatcher.java:91) 
     at org.glassfish.jersey.server.model.ResourceMethodInvoker.invoke(ResourceMethodInvoker.java:346) 
     at org.glassfish.jersey.server.model.ResourceMethodInvoker.apply(ResourceMethodInvoker.java:341) 
     at org.glassfish.jersey.server.model.ResourceMethodInvoker.apply(ResourceMethodInvoker.java:101) 
     at org.glassfish.jersey.server.ServerRuntime$1.run(ServerRuntime.java:224) 
     at org.glassfish.jersey.internal.Errors$1.call(Errors.java:271) 
     at org.glassfish.jersey.internal.Errors$1.call(Errors.java:267) 
     at org.glassfish.jersey.internal.Errors.process(Errors.java:315) 
     at org.glassfish.jersey.internal.Errors.process(Errors.java:297) 
     at org.glassfish.jersey.internal.Errors.process(Errors.java:267) 
     at org.glassfish.jersey.process.internal.RequestScope.runInScope(RequestScope.java:317) 
     at org.glassfish.jersey.server.ServerRuntime.process(ServerRuntime.java:198) 
     at org.glassfish.jersey.server.ApplicationHandler.handle(ApplicationHandler.java:946) 
     at org.glassfish.jersey.servlet.WebComponent.service(WebComponent.java:323) 
     at org.glassfish.jersey.servlet.ServletContainer.service(ServletContainer.java:372) 
     at org.glassfish.jersey.servlet.ServletContainer.service(ServletContainer.java:335) 
     at org.glassfish.jersey.servlet.ServletContainer.service(ServletContainer.java:218) 
     at org.apache.catalina.core.StandardWrapper.service(StandardWrapper.java:1682) 
     at org.apache.catalina.core.StandardWrapperValve.invoke(StandardWrapperValve.java:318) 
     at org.apache.catalina.core.StandardContextValve.invoke(StandardContextValve.java:160) 
     at org.apache.catalina.core.StandardPipeline.doInvoke(StandardPipeline.java:734) 
     at org.apache.catalina.core.StandardPipeline.invoke(StandardPipeline.java:673) 
     at com.sun.enterprise.web.WebPipeline.invoke(WebPipeline.java:99) 
     at org.apache.catalina.core.StandardHostValve.invoke(StandardHostValve.java:174) 
     at org.apache.catalina.connector.CoyoteAdapter.doService(CoyoteAdapter.java:357) 
     at org.apache.catalina.connector.CoyoteAdapter.service(CoyoteAdapter.java:260) 
     at com.sun.enterprise.v3.services.impl.ContainerMapper.service(ContainerMapper.java:188) 
     at org.glassfish.grizzly.http.server.HttpHandler.runService(HttpHandler.java:191) 
     at org.glassfish.grizzly.http.server.HttpHandler.doHandle(HttpHandler.java:168) 
     at org.glassfish.grizzly.http.server.HttpServerFilter.handleRead(HttpServerFilter.java:189) 
     at org.glassfish.grizzly.filterchain.ExecutorResolver$9.execute(ExecutorResolver.java:119) 
     at org.glassfish.grizzly.filterchain.DefaultFilterChain.executeFilter(DefaultFilterChain.java:288) 
     at org.glassfish.grizzly.filterchain.DefaultFilterChain.executeChainPart(DefaultFilterChain.java:206) 
     at org.glassfish.grizzly.filterchain.DefaultFilterChain.execute(DefaultFilterChain.java:136) 
     at org.glassfish.grizzly.filterchain.DefaultFilterChain.process(DefaultFilterChain.java:114) 
     at org.glassfish.grizzly.ProcessorExecutor.execute(ProcessorExecutor.java:77) 
     at org.glassfish.grizzly.nio.transport.TCPNIOTransport.fireIOEvent(TCPNIOTransport.java:838) 
     at org.glassfish.grizzly.strategies.AbstractIOStrategy.fireIOEvent(AbstractIOStrategy.java:113) 
     at org.glassfish.grizzly.strategies.WorkerThreadIOStrategy.run0(WorkerThreadIOStrategy.java:115) 
     at org.glassfish.grizzly.strategies.WorkerThreadIOStrategy.access$100(WorkerThreadIOStrategy.java:55) 
     at org.glassfish.grizzly.strategies.WorkerThreadIOStrategy$WorkerThreadRunnable.run(WorkerThreadIOStrategy.java:135) 
     at org.glassfish.grizzly.threadpool.AbstractThreadPool$Worker.doWork(AbstractThreadPool.java:564) 
     at org.glassfish.grizzly.threadpool.AbstractThreadPool$Worker.run(AbstractThreadPool.java:544) 
     at java.lang.Thread.run(Thread.java:745) 
+0

我只想評論一下,在這種「允許所有」時尚中使用CORS標頭是相當危險的。另請參見http://stackoverflow.com/a/25638018/499922 –

+0

是的我已經查看了依賴性樹,並從javaee-api-7.0獲取了javax.rs,但沒有得到澤西版本。 – Softey

回答

2

您的過濾器不工作,因爲您的自定義ExceptionMapper無法正常工作。使用@Provider批註註釋是不夠的,您還應該包括它位於提供程序包配置中的包或手動註冊此自定義異常映射程序。

例如:

<servlet> 
    <servlet-name>jersey-serlvet</servlet-name> 
    <servlet-class>org.glassfish.jersey.servlet.ServletContainer</servlet-class> 
    <init-param> 
     <param-name>jersey.config.server.provider.packages</param-name> 
     <param-value>org.dashboard.exposed,org.dashboard.exceptions</param-value> 
    </init-param> 
    <load-on-startup>1</load-on-startup> 
</servlet> 

注意的<init-param>名稱的確切值取決於版本您正在使用。

1

一般ContainerResponseFilter總會執行,看到Server filters

過濾器將每一個被執行大多數情況下,資源方法執行後的響應。即使沒有運行資源方法,也會執行響應過濾器,例如,當找不到資源方法並且Jersey運行時返回404「未找到」響應代碼時。在這種情況下,過濾器將被執行並將處理404響應。

另請參閱:Filter and interceptor execution orderJAX_RS_SPEC-230

但提供者必須是public,參見JERSEY-2094JERSEY-2096JERSEY-2097

在某些情況下,@PreMatching禁用ContainerResponseFilter,請參閱ContainerResponseFilter not working

此外,你必須知道,如果響應已經是committed,你不能添加標題。

相關問題