2013-12-08 111 views
1

在生產環境中的應用不能映射404錯誤頁面,春季安全插件始終重定向到登錄頁面「,並返回一個錯誤302在Tomcat中日誌接入)移動temporaly- )誤差的控制器春季安全+ 404錯誤

@Secured(['permitAll']) 
class ErrorsController { 

    def error401() { 
     render view: '401' 
    } 

    def error403() { 
     render view:'403' 
    } 

    def error404() { 
     render view:'404' 
    } 

    def error500() { 
     render view:'error' 
    } 

    def error503() { 
     render view:'503' 
    } 
} 

2)URL映射

static mappings = { 
     "/" { 
      controller = "dashboard" 
      action  = { 'index' } 
      view  = { 'index' } 
     } 

     "/$controller/$action?/$id?"{ 
      constraints { controller(matches:/^((?!(api|mobile|web)).*)$/) } 
     } 



     "401"(controller: "errors", action: "error401") // session timeout 
     "403"(controller: "errors", action: "error403") 
     "404"(controller: "errors", action: "error404") 
     "500"(controller: "errors", action: "error500") 
     "500"(controller: "errors", action: "error403", exception: AccessDeniedException) 
     "500"(controller: "errors", action: "error403", exception: NotFoundException) 
    } 

因此,當在生產模式而已,我生成假網址模式,沒有重定向到 「404」 就可以解決。任何想法 ?

回答

-3

那麼它不會禁用安全,我只是省略了後我的整個配置

'/': ['IS_AUTHENTICATED_ANONYMOUSLY'], 
     '/**': ['IS_AUTHENTICATED_ANONYMOUSLY'], 
     '/login/auth': ['IS_AUTHENTICATED_ANONYMOUSLY'], 
     '/index': ['permitAll'], 
     '/index.gsp': ['permitAll'], 
     '/**/_common/**/': ['permitAll'], 
     '/**/_menu/**/': ['permitAll'], 
     '/console/**/': ['permitAll'], 
     '/contact/**/': ['permitAll'], 
     '/dashboard/**/': ['permitAll'], 
     '/jcaptcha/**': ['permitAll'], 
     '/demo/**/': ['permitAll'], 
     '/errors/**/': ['permitAll'], 
     '/features/**/': ['permitAll'], 
     '/layouts/**/': ['permitAll'], 
     '/service/**/': ['permitAll'], 
     '/siteinfo/**/': ['permitAll'], 
     '/store/**/': ['permitAll'], 
     '/support/**/': ['permitAll'], 
     '/**/js/**': ['permitAll'], 
     '/**/css/**': ['permitAll'], 
     '/**/less/**': ['permitAll'], 
     '/**/images/**': ['permitAll'], 
     '/admin/**': ['ROLE_SUPERADMIN'], 
     '/affiliates/**': ['ROLE_SUPERADMIN'], 
     '/billing/**': ['ROLE_SUPERADMIN'], 
     '/dataStore/**': ['ROLE_SUPERADMIN'], 
     '/requestmap/**': ['ROLE_SUPERADMIN'], 
     '/user/**': ['ROLE_SUPERADMIN'], 
     '/userRole/**': ['ROLE_SUPERADMIN'], 
     '/role/**': ['ROLE_SUPERADMIN'], 
     '/quartz/**': ['ROLE_SUPERADMIN'], 
     '/invoice/**': ['ROLE_SUPERADMIN'], 
     '/billing/**': ['ROLE_SUPERADMIN'], 
     '/orders/**': ['ROLE_SUPERADMIN'], 
     '/profile/**': ['ROLE_SUPERADMIN'], 
     '/pack/**': ['ROLE_SUPERADMIN'], 
     '/statistics/**': ['ROLE_SUPERADMIN'], 
     '/uploadedItems/**': ['ROLE_SUPERADMIN'], 

     '/secure/**': [ 
       'ROLE_ADMIN', 
       'ROLE_CUSTOMER' 
     ], 

     '/contacts/**': [ 
       'ROLE_ADMIN', 
       'ROLE_USER', 
       'ROLE_GROUP_OWNER' 
     ], 

     '/files/**': [ 
       'ROLE_ADMIN', 
       'ROLE_USER', 
       'ROLE_GROUP_OWNER', 
       'ROLE_EDITOR', 
       'ROLE_UPLOADER', 
       'ROLE_READER' 
     ], 

     '/notes/**': [ 
       'ROLE_ADMIN', 
       'ROLE_USER', 
       'ROLE_GROUP_OWNER', 
       'ROLE_EDITOR', 
       'ROLE_UPLOADER', 
       'ROLE_READER' 
     ], 

     '/toolbox/**': [ 
       'ROLE_ADMIN', 
       'ROLE_USER', 
       'ROLE_GROUP_OWNER', 
       'ROLE_EDITOR', 
       'ROLE_UPLOADER', 
       'ROLE_READER'] 
+0

哇 - 這是非常沒有答案。這隻會禁用整個網站的安全性。 –