mirror of
https://github.com/nagisa77/OpenIsle.git
synced 2026-07-25 14:06:11 +00:00
Merge pull request #3 from nagisa77/codex/add-error-code-for-failed-auth-request
Handle JWT auth failure with 401 response
This commit is contained in:
@@ -82,8 +82,17 @@ public class SecurityConfig {
|
|||||||
UserDetails userDetails = userDetailsService().loadUserByUsername(username);
|
UserDetails userDetails = userDetailsService().loadUserByUsername(username);
|
||||||
UsernamePasswordAuthenticationToken authToken = new UsernamePasswordAuthenticationToken(userDetails, null, userDetails.getAuthorities());
|
UsernamePasswordAuthenticationToken authToken = new UsernamePasswordAuthenticationToken(userDetails, null, userDetails.getAuthorities());
|
||||||
org.springframework.security.core.context.SecurityContextHolder.getContext().setAuthentication(authToken);
|
org.springframework.security.core.context.SecurityContextHolder.getContext().setAuthentication(authToken);
|
||||||
} catch (Exception ignored) {
|
} catch (Exception e) {
|
||||||
|
response.setStatus(HttpServletResponse.SC_UNAUTHORIZED);
|
||||||
|
response.setContentType("application/json");
|
||||||
|
response.getWriter().write("{\"error\": \"Invalid or expired token\"}");
|
||||||
|
return;
|
||||||
}
|
}
|
||||||
|
} else if (!request.getRequestURI().startsWith("/api/auth")) {
|
||||||
|
response.setStatus(HttpServletResponse.SC_UNAUTHORIZED);
|
||||||
|
response.setContentType("application/json");
|
||||||
|
response.getWriter().write("{\"error\": \"Missing token\"}");
|
||||||
|
return;
|
||||||
}
|
}
|
||||||
filterChain.doFilter(request, response);
|
filterChain.doFilter(request, response);
|
||||||
}
|
}
|
||||||
|
|||||||
Reference in New Issue
Block a user