org.springframework.security.oauth2.provider.error.OAuth2AccessDeniedHandler Java Examples

/**
* 处理spring security oauth 处理失败返回消息格式
* resp_code
* resp_desc
*/
  @Bean
  public OAuth2AccessDeniedHandler oAuth2AccessDeniedHandler(){
  	return new OAuth2AccessDeniedHandler(){
  	    
  	    @Override
  	    public void handle(HttpServletRequest request, HttpServletResponse response, AccessDeniedException authException) throws IOException, ServletException {

  	    	Map<String ,String > rsp =new HashMap<>();  
  	    	response.setContentType("application/json;charset=UTF-8");

  	        response.setStatus(HttpStatus.UNAUTHORIZED.value() );
		
		rsp.put("resp_code", HttpStatus.UNAUTHORIZED.value() + "") ;
              rsp.put("resp_msg", authException.getMessage()) ;
              
              response.setContentType("application/json;charset=UTF-8");
  			response.getWriter().write(objectMapper.writeValueAsString(rsp));
  			response.getWriter().flush();
  			response.getWriter().close();
  	        
  	    }
  	};
  }
 

@Override
public void configure(HttpSecurity http) throws Exception {
//configure security for the http methods
    http.
    anonymous().disable()
    .requestMatchers().antMatchers(HttpMethod.GET, "/pet/**")
    .and().authorizeRequests()
    .antMatchers(HttpMethod.GET, "/pet/**").access("hasRole('ADMIN')")
    .and().exceptionHandling().accessDeniedHandler(new OAuth2AccessDeniedHandler());
    http.
    anonymous().disable()
    .requestMatchers().antMatchers(HttpMethod.GET, "/store/**")
    .and().authorizeRequests()
    .antMatchers(HttpMethod.GET, "/store/**").access("hasRole('ADMIN')")
    .and().exceptionHandling().accessDeniedHandler(new OAuth2AccessDeniedHandler());
    http.
    anonymous().disable()
    .requestMatchers().antMatchers(HttpMethod.GET, "/user/**")
    .and().authorizeRequests()
    .antMatchers(HttpMethod.GET, "/user/**").access("hasRole('ADMIN')")
    .and().exceptionHandling().accessDeniedHandler(new OAuth2AccessDeniedHandler());
}
 

@Override
 public void configure(final HttpSecurity http) throws Exception {
 	http
 		.requestMatchers().antMatchers("/doctor/**", "/rx/**", "/account/**")
 		.and()
 		.authorizeRequests()
 		.antMatchers(HttpMethod.GET,"/doctor/**").access("#oauth2.hasScope('doctor') and #oauth2.hasScope('read')")
.antMatchers(HttpMethod.POST,"/doctor/**").access("#oauth2.hasScope('doctor') and #oauth2.hasScope('write')")
.antMatchers(HttpMethod.GET,"/rx/**").access("#oauth2.hasScope('doctor') and #oauth2.hasScope('read')")
.antMatchers(HttpMethod.POST,"/rx/**").access("#oauth2.hasScope('doctor') and #oauth2.hasScope('write')")	
.antMatchers("/account/**").permitAll()
.and()
.exceptionHandling().accessDeniedHandler(new OAuth2AccessDeniedHandler())
.and()
.csrf().disable();

 }
 

/**
 * 处理spring security oauth 处理失败返回消息格式
 */
@Bean
public OAuth2AccessDeniedHandler oAuth2AccessDeniedHandler() {
    return new OAuth2AccessDeniedHandler() {

        @Override
        public void handle(HttpServletRequest request, HttpServletResponse response, AccessDeniedException authException) throws IOException, ServletException {
            ResponseUtil.responseFailed(objectMapper, response, authException.getMessage());
        }
    };
}
 

@Override
public void configure(HttpSecurity http) throws Exception {
    String[] ignores = new String[filterIgnorePropertiesConfig.getUrls().size()];
    http
            .csrf().disable()
            .httpBasic().disable()
            .authorizeRequests()
            .antMatchers(filterIgnorePropertiesConfig.getUrls().toArray(ignores)).permitAll()
            .anyRequest().authenticated()
            .and().exceptionHandling().accessDeniedHandler(new OAuth2AccessDeniedHandler());
    // 手机号登录
    http.apply(mobileSecurityConfigurer);
    // 微信登录
    http.apply(wxSecurityConfigurer);
}
 

@Override
public void configure(HttpSecurity http) throws Exception
{
    // http.anonymous().disable(); // since we allow anonymous users to access Swagger
    // and create a user account
    http.authorizeRequests()
        .antMatchers("/",
                     "/h2-console/**",
                     "/swagger-resources/**",
                     "/swagger-resource/**",
                     "/swagger-ui.html",
                     "/v2/api-docs",
                     "/webjars/**",
                     "/createnewuser")
        .permitAll()
        .antMatchers("/users/**",
                     "/useremails/**",
                     "/oauth/revoke-token",
                     "/logout")
        .authenticated()
        .antMatchers("/roles/**",
                     "/actuator/**")
        .hasAnyRole("ADMIN")
        .and()
        .exceptionHandling()
        .accessDeniedHandler(new OAuth2AccessDeniedHandler());

    // http.requiresChannel().anyRequest().requiresSecure(); // required for https
    http.csrf()
        .disable();
    http.headers()
        .frameOptions()
        .disable();
    http.logout()
        .disable();
}
 

@Override
public void configure(HttpSecurity http) throws Exception {
       http.
               anonymous().disable()
               .authorizeRequests()
               .antMatchers("/users/**").access("hasRole('USER')")
               .and().exceptionHandling().accessDeniedHandler(new OAuth2AccessDeniedHandler());
}
 

@Override
public void configure(HttpSecurity http) throws Exception {
    http.csrf().disable()
        .authorizeRequests().antMatchers("/v2/api-docs","/sms/token").permitAll()
            .anyRequest().authenticated()
        .and().logout().permitAll()
        .and().formLogin().permitAll()
        .and().exceptionHandling().accessDeniedHandler(new OAuth2AccessDeniedHandler());
}
 

@Override
public void configure(HttpSecurity http) throws Exception {
       http
           .authorizeRequests()
           .antMatchers("/api/**").authenticated()
           .and().exceptionHandling().accessDeniedHandler(new OAuth2AccessDeniedHandler());
}
 

@Override
public void configure(HttpSecurity http) throws Exception {
    http.
            anonymous().disable()
            .authorizeRequests()
            .antMatchers("/api/**").authenticated()
            .and().exceptionHandling().accessDeniedHandler(new OAuth2AccessDeniedHandler());
}
 

@Override
public void configure(HttpSecurity http) throws Exception {
    http
        .cors()
            .and()
        .requestMatchers()
            .antMatchers("/api/**")
            .and()
        .authorizeRequests()
            .antMatchers("/api/**/board/**").permitAll()
            .antMatchers("/api/**/user/signup").permitAll()
            .antMatchers("/api/**").hasAuthority(Authority.USER.getAuthority())
            .and()
        .exceptionHandling().accessDeniedHandler(new OAuth2AccessDeniedHandler());
}
 

@Override
public void configure(final ResourceServerSecurityConfigurer resources) throws Exception {
    final OAuth2AuthenticationEntryPoint oAuth2AuthenticationEntryPoint = new OAuth2AuthenticationEntryPoint();
    oAuth2AuthenticationEntryPoint.setExceptionRenderer(new ProblemOauthExceptionRenderer());
    resources.authenticationEntryPoint(oAuth2AuthenticationEntryPoint);
    resources.tokenServices(tokenServices);
    resources.expressionHandler(new ExtendedOAuth2WebSecurityExpressionHandler());
    final OAuth2AccessDeniedHandler oAuth2AccessDeniedHandler = new OAuth2AccessDeniedHandler();
    oAuth2AccessDeniedHandler.setExceptionRenderer(new ProblemOauthExceptionRenderer());
    resources.accessDeniedHandler(oAuth2AccessDeniedHandler);
}
 

@Bean
public OAuth2AccessDeniedHandler oauth2AccessDeniedHandler(ObjectMapperProvider objectMapperProvider){
	OAuth2AccessDeniedHandler dh = new OAuth2AccessDeniedHandler();
	dh.setExceptionRenderer(oauth2ExceptionRenderer(objectMapperProvider));
	return dh;
}
 

/**
 * Classic Spring Security stuff, defining how to handle {@link AccessDeniedException}s.
 * Inject your custom exception translator into the OAuth2AccessDeniedHandler.
 * (if you don't add this access denied exceptions may use a different format)
 * 
 * @return AccessDeniedHandler
 */
@Bean
public AccessDeniedHandler accessDeniedHandler() {
    final OAuth2AccessDeniedHandler handler = new OAuth2AccessDeniedHandler();
    handler.setExceptionTranslator(exceptionTranslator());
    return handler;
}
 

/**
 * <p>
 * Configures security.
 * </p>
 * @param http security to configure
 * @throws Exception if something unexpected happened
 */
@Override
public void configure(HttpSecurity http) throws Exception {
	notNull(http, "http");
	http.csrf().disable().authorizeRequests().antMatchers("/**").authenticated().and()
			.exceptionHandling().accessDeniedHandler(new OAuth2AccessDeniedHandler());
}