Written on
·
341
0
public class AjaxAccessDeniedHandler implements AccessDeniedHandler {
@Override
public void handle(HttpServletRequest request, HttpServletResponse response, AccessDeniedException accessDeniedException) throws IOException, ServletException {
System.out.println("accessDeniedException = " + accessDeniedException);
response.sendError(HttpServletResponse.SC_FORBIDDEN, "message");
}
}
에러를 생성하는 강의였는데요
"접근한 페이지에 어떤 권한이 필요했는지"를 추출해서 에러메시지에 포함시키고 싶은데, 추출하는 방법이있을까요?
사용자권한은 홀더통해서 가져올 수 있긴하긴한데요..
Answer 1
0
네
후반부 강의에 보면 DB 와 권한을 연동하는 부분이 있는데 참고하시기 바랍니다.
일단 제가 대략 작성해 보았습니다.
public class AjaxAccessDeniedHandler implements AccessDeniedHandler {
private HttpSecurity httpSecurity;
public AjaxAccessDeniedHandler(HttpSecurity httpSecurity){
this.httpSecurity = httpSecurity;
}
@Override
public void handle(HttpServletRequest request, HttpServletResponse response, AccessDeniedException accessDeniedException) throws IOException {
FilterSecurityInterceptor filterSecurityInterceptor = httpSecurity.getSharedObject(FilterSecurityInterceptor.class);
ExpressionBasedFilterInvocationSecurityMetadataSource securityMetadataSource = (ExpressionBasedFilterInvocationSecurityMetadataSource)filterSecurityInterceptor.getSecurityMetadataSource();
Collection<ConfigAttribute> attributes = securityMetadataSource.getAttributes(new FilterInvocation(request, response, (request1, response1) -> {
System.out.println("nothing to to");
}));
System.out.println("attributes = " + attributes);
System.out.println("accessDeniedException = " + accessDeniedException);
response.sendError(HttpServletResponse.SC_FORBIDDEN, "message");
}
}