Spring Security——自定义认证错误提示信息及自适应返回格式解决方案

曾经终败给现在 2022-10-31 00:42 9阅读 0赞

# 解决方案 #

package com.hailiu.web.handler;
    
    import com.hailiu.model.Log;
    import com.hailiu.web.bean.ResponseBean;
    import com.hailiu.web.util.HttpServletUtil;
    import lombok.extern.slf4j.Slf4j;
    import org.springframework.beans.factory.annotation.Autowired;
    import org.springframework.http.MediaType;
    import org.springframework.security.authentication.*;
    import org.springframework.security.core.AuthenticationException;
    import org.springframework.security.web.authentication.SimpleUrlAuthenticationFailureHandler;
    import org.springframework.stereotype.Component;
    
    import javax.servlet.ServletException;
    import javax.servlet.http.HttpServletRequest;
    import javax.servlet.http.HttpServletResponse;
    import java.io.IOException;
    import java.time.LocalDateTime;
    
    /**
     * @author ShenTuZhiGang
     * @version 1.0.0
     * @date 2020-03-21 16:48
     */
    @Slf4j
    @Component
    public class CustomAuthenticationFailureHandler extends
            SimpleUrlAuthenticationFailureHandler {
    
        public CustomAuthenticationFailureHandler(){
            super("/login?error");
        }
    
        @Override
        public void onAuthenticationFailure(HttpServletRequest httpServletRequest,
                                            HttpServletResponse httpServletResponse,
                                            AuthenticationException e) throws IOException, ServletException {
            if (e instanceof LockedException) {
                e = new LockedException("账户被锁定，请联系管理员!", e);
            } else if (e instanceof CredentialsExpiredException) {
                e = new CredentialsExpiredException("密码过期，请联系管理员!", e);
            } else if (e instanceof AccountExpiredException) {
                e = new AccountExpiredException("账户过期，请联系管理员!", e);
            } else if (e instanceof DisabledException) {
                e = new DisabledException("账户被禁用，请联系管理员!", e);
            } else if (e instanceof BadCredentialsException) {
                e = new BadCredentialsException("用户名或者密码输入错误，请重新输入!", e);
            }
            MediaType acceptMediaType = HttpServletUtil.getRequestPrimaryAcceptMediaType(httpServletRequest);
            if(MediaType.TEXT_HTML.compareTo(acceptMediaType)==0){
                super.onAuthenticationFailure(httpServletRequest, httpServletResponse, e);
            }else if(MediaType.APPLICATION_JSON.compareTo(acceptMediaType)==0 || MediaType.ALL.compareTo(acceptMediaType)==0){
                ResponseBean retTemp = ResponseBean.builder()
                        .status(400)
                        .msg("登录失败:"+e.getMessage())
                        .build();
                HttpServletUtil.writeObjectToResponse(httpServletResponse,retTemp);
            }
        }
    }

>     public class HttpServletUtil {
>         /**
>          * 获取请求媒体类型
>          * @param request http请求
>          * @return 媒体类型
>          */
>         public static MediaType getRequestPrimaryAcceptMediaType(HttpServletRequest request){
>             String accept = request.getHeader("Accept");
>             MediaType acceptMediaType;
>             if(StringUtils.isEmpty(accept)){
>                 acceptMediaType = MediaType.APPLICATION_JSON;
>             }else{
>                 String[] str = accept.split(",");
>                 if(str.length>0){
>                     try {
>                         acceptMediaType = MediaType.valueOf(str[0]);
>                     }catch (InvalidMediaTypeException ex){
>                         acceptMediaType = MediaType.APPLICATION_JSON;
>                     }
>                 }else{
>                     acceptMediaType = MediaType.APPLICATION_JSON;
>                 }
>             }
>             return acceptMediaType;
>         }
>     }

# 参考文章 #

[Spring security登录 显示用户名不存在或者密码错误][Spring security_]

[Spring-Security自定义登陆错误提示信息][Spring-Security]

[spring security自定义登录失败返回错误信息][spring security]

[springsecurity中详细显示登录错误的提示信息][springsecurity]

[Spring security_]: https://blog.csdn.net/weixin_42198239/article/details/101110543
[Spring-Security]: https://blog.csdn.net/doinbb/article/details/98729818
[spring security]: https://blog.csdn.net/XXX1238XGH/article/details/102801570
[springsecurity]: https://blog.csdn.net/jackyrongvip/article/details/84689251