AccessDeniedHandler에 권한정보를 추출할 수 있나요?

Question

public class AjaxAccessDeniedHandler implements AccessDeniedHandler { @Override public void handle (HttpServletRequest request , HttpServletResponse response , AccessDeniedException accessDeniedException) throws IOException , ServletException { System. out .println( "accessDeniedException = " + accessDeniedException) ; response.sendError(HttpServletResponse. SC_FORBIDDEN , "message " ) ; } } 에러를 생성하는 강의였는데요 "접근한 페이지에 어떤 권한이 필요했는지"를 추출해서 에러메시지에 포함시키고 싶은데, 추출하는 방법이있을까요? 사용자권한은 홀더통해서 가져올 수 있긴하긴한데요..

정수원 · Answer

네 후반부 강의에 보면 DB 와 권한을 연동하는 부분이 있는데 참고하시기 바랍니다. 일단 제가 대략 작성해 보았습니다. public class AjaxAccessDeniedHandler implements AccessDeniedHandler { private HttpSecurity httpSecurity ; public AjaxAccessDeniedHandler ( HttpSecurity httpSecurity ) { this . httpSecurity = httpSecurity ; } @Override public void handle ( HttpServletRequest request , HttpServletResponse response , AccessDeniedException accessDeniedException ) throws IOException { FilterSecurityInterceptor filterSecurityInterceptor = httpSecurity . getSharedObject ( FilterSecurityInterceptor . class ) ; ExpressionBasedFilterInvocationSecurityMetadataSource securityMetadataSource = ( ExpressionBasedFilterInvocationSecurityMetadataSource ) filterSecurityInterceptor. getSecurityMetadataSource () ; Collection < ConfigAttribute > attributes = securityMetadataSource. getAttributes ( new FilterInvocation ( request , response , ( request1 , response1 ) -> { System . out . println ( "nothing to to" ) ; } ) ) ; System . out . println ( "attributes = " + attributes ) ; System . out . println ( "accessDeniedException = " + accessDeniedException ) ; response . sendError ( HttpServletResponse . SC_FORBIDDEN , "message" ) ; } }