spring boot整合SpringSecurity-03 自定义报错信息

怼烎@ 2022-09-03 05:09 166阅读 0赞

# spring boot整合SpringSecurity 目录 #

[spring boot整合SpringSecurity-01入门][spring boot_SpringSecurity-01]  
[spring boot整合SpringSecurity-02 基于Serssion的认证][spring boot_SpringSecurity-02 _Serssion]  
[spring boot整合SpringSecurity-03 自定义报错信息][spring boot_SpringSecurity-03]  
[spring boot整合SpringSecurity-04 使用jwt的方式认证][spring boot_SpringSecurity-04 _jwt]

# 自定义报错信息 #

当我们没有配置报错信息，报错信息是这样的。  
![在这里插入图片描述][2543b802da134d7194988623778ec041.png]  
这样的报错信息并不是我们想要的。这个时候就需要我们自己定义报错信息。

## 配置文件信息 ##

package com.hnbd.jinshui.config;
    
    import com.hnbd.jinshui.security.handler.JWTAccessDeniedHandler;
    import com.hnbd.jinshui.security.handler.JWTAuthenticationEntryPoint;
    import com.hnbd.jinshui.security.handler.JwtLogoutSuccessHandler;
    import com.hnbd.jinshui.service.UserDetailsServiceImpl;
    import org.springframework.beans.factory.annotation.Autowired;
    import org.springframework.context.annotation.Configuration;
    import org.springframework.security.config.annotation.authentication.builders.AuthenticationManagerBuilder;
    import org.springframework.security.config.annotation.method.configuration.EnableGlobalMethodSecurity;
    import org.springframework.security.config.annotation.web.builders.HttpSecurity;
    import org.springframework.security.config.annotation.web.configuration.EnableWebSecurity;
    import org.springframework.security.config.annotation.web.configuration.WebSecurityConfigurerAdapter;
    import org.springframework.security.crypto.bcrypt.BCryptPasswordEncoder;
    
    /**
     * SecurityConfig    登录认证的配置
     *
     * @创建人 江枫沐雪
     * @创建时间 2021/6/20 17:17
     */
    @EnableWebSecurity
    @EnableGlobalMethodSecurity(prePostEnabled = true)
    public class SecurityConfig extends WebSecurityConfigurerAdapter {
        
    
    
        @Autowired
        private UserDetailsServiceImpl userDetailsService;
    
        @Autowired
        private BCryptPasswordEncoder bCryptPasswordEncoder;
    
        //查询用户信息
        @Override
        protected void configure(AuthenticationManagerBuilder auth) throws Exception {
        
            //用户详情信息
            auth.userDetailsService(userDetailsService)
                    //密码加密方式
                    .passwordEncoder(bCryptPasswordEncoder);
        }
    
        //安全拦截机制
        @Override
        protected void configure(HttpSecurity http) throws Exception {
        
            // @formatter:off
            //配置跨域请求 并且 关闭打开的csrf保护
            http .cors().and().csrf().disable()
    //                 认证配置
                    .authorizeRequests()
    //                 登录验证等放行
                    .antMatchers("/auth/**","/app/**").permitAll()
    //                 剩下的接口都需要登陆后访问
                    .anyRequest().authenticated()
                    .and()
                    //表单登录
                    .formLogin()
    //                   用户未登录的的时候跳转的这个路径
    //                    .loginPage("/home")
    //                   用户登录时，用户名、密码提交的目的路径
                    .loginProcessingUrl("/login")
    //                   用户成功登录以后
                    .successForwardUrl("/success")
                    .and()
                    .logout()
                    .logoutUrl("/logout")
                    // 退出成功后返回
                    .logoutSuccessHandler(new JwtLogoutSuccessHandler())
                    .and()
    //                   异常处理
                    .exceptionHandling()
    //                   没有登录，返回
                    .authenticationEntryPoint(new JWTAuthenticationEntryPoint())
    //                   添加无权限时的处理
                    .accessDeniedHandler(new JWTAccessDeniedHandler());
        }
    }

## 退出时返回的数据。 ##

import org.springframework.security.core.Authentication;
    import org.springframework.security.web.authentication.logout.LogoutSuccessHandler;
    
    import javax.servlet.ServletException;
    import javax.servlet.http.HttpServletRequest;
    import javax.servlet.http.HttpServletResponse;
    import java.io.IOException;
    
    
    /**
     * 退出成功处理器
     * @创建人 江枫沐雪
     * @创建时间 2021/8/1 15:00
     */
    public class JwtLogoutSuccessHandler implements LogoutSuccessHandler {
        
    
    	@Override
    	public void onLogoutSuccess(HttpServletRequest request, HttpServletResponse response, Authentication authentication)
    			throws IOException, ServletException {
        
    		// 返回结果   字符集编码
    		response.setCharacterEncoding("UTF-8");
    		//  设置内容类型
    		response.setContentType("application/json; charset=utf-8");
    //		response.getWriter().append(JSONConverter.toJSON(ApiResponseWithData.ofSuccess("成功推出")));
    		//返回的信息
    		response.getWriter().append("成功推出");
    	}
    
    }

## 没有登录 ##

import org.springframework.security.core.AuthenticationException;
    import org.springframework.security.web.AuthenticationEntryPoint;
    
    import javax.servlet.ServletException;
    import javax.servlet.http.HttpServletRequest;
    import javax.servlet.http.HttpServletResponse;
    import java.io.IOException;
    
    /**
     * 没有登录
     * @创建人 江枫沐雪
     * @创建时间 2021/8/1 15:00
     */
    public class JWTAuthenticationEntryPoint implements AuthenticationEntryPoint {
        
    
    	@Override
    	public void commence(HttpServletRequest request, HttpServletResponse response,
    						 AuthenticationException authException) throws IOException, ServletException {
        
    		response.setCharacterEncoding("UTF-8");
    		response.setContentType("application/json; charset=utf-8");
    //		response.getWriter().write(JSONConverter.toJSON(ApiResponse.ofStatus(ApiResponseStatus.INVALID_TOKEN)));
    		response.getWriter().append("没有登录");
    	}
    }

## 无权访问结果 ##

import org.springframework.security.access.AccessDeniedException;
    import org.springframework.security.web.access.AccessDeniedHandler;
    
    import javax.servlet.ServletException;
    import javax.servlet.http.HttpServletRequest;
    import javax.servlet.http.HttpServletResponse;
    import java.io.IOException;
    
    /**
     * 无访问权限处理器
     *
     * @创建人 江枫沐雪
     * @创建时间 2021/8/1 15:00
     */
    public class JWTAccessDeniedHandler implements AccessDeniedHandler {
        
        @Override
        public void handle(HttpServletRequest request, HttpServletResponse response, AccessDeniedException e) throws IOException, ServletException {
        
            //设置字符编码
            request.setCharacterEncoding("UTF-8");
            //设置内容类型
            response.setContentType("application/json; charset=utf-8");
            response.getWriter().append("没有权限");
    //        httpServletResponse.getWriter()
    //                .write(JSONConverter.toJSON(ApiResponse.ofStatus(ApiResponseStatus.NO_PERMISSION)));
    
        }
    }

[spring boot_SpringSecurity-01]: https://blog.csdn.net/xt314159/article/details/119320062
[spring boot_SpringSecurity-02 _Serssion]: https://blog.csdn.net/xt314159/article/details/119406881
[spring boot_SpringSecurity-03]: https://blog.csdn.net/xt314159/article/details/119421047
[spring boot_SpringSecurity-04 _jwt]: https://blog.csdn.net/xt314159/article/details/119423384
[2543b802da134d7194988623778ec041.png]: /images/20220829/1a056db74d5540c4b36147e91ddcf53b.png