io.nerv.security.entrypoint.UnauthorizedHandler Maven / Gradle / Ivy

Go to download

Show more of this group Show more artifacts with this name
Show all versions of eva-web-auth Show documentation

we jar with system management

There is a newer version: 3.0.0

package io.nerv.security.entrypoint;

import io.nerv.core.enums.BizCodeEnum;
import org.springframework.http.MediaType;
import org.springframework.security.core.AuthenticationException;
import org.springframework.security.web.AuthenticationEntryPoint;
import org.springframework.stereotype.Component;

import javax.servlet.http.HttpServletRequest;
import javax.servlet.http.HttpServletResponse;
import java.io.IOException;
import java.io.Serializable;

/**
 * 鉴权失败时的响应
 * @author: S.PKAQ
 * @Datetime: 2018/4/24 23:24
 */
@Component
public class UnauthorizedHandler implements AuthenticationEntryPoint, Serializable {
    //当访问的资源没有权限，会调用这里
    @Override
    public void commence(HttpServletRequest request,
                         HttpServletResponse response,
                         AuthenticationException authException) throws IOException {
        //返回json形式的错误信息
        response.setCharacterEncoding("UTF-8");
        response.setContentType(MediaType.APPLICATION_JSON_VALUE);
        response.sendError(HttpServletResponse.SC_UNAUTHORIZED, BizCodeEnum.LOGIN_EXPIRED.getName());
    }
}