🔒 Fixing security issues. 微信模块权限完善,SQL 维护、token 过期提示优化

This commit is contained in:
lengleng committed 2020-06-09 12:02:02 +08:00
1 parent d1b2fc2e2b
commit de263a7630
9 files changed
+28 -10

No files matched your search

@@ -26,6 +26,7 @@ import lombok.SneakyThrows;
import lombok.extern.slf4j.Slf4j;
import org.springframework.http.MediaType;
import org.springframework.security.authentication.CredentialsExpiredException;
import org.springframework.security.authentication.InsufficientAuthenticationException;
import org.springframework.security.core.AuthenticationException;
import org.springframework.security.core.SpringSecurityMessageSource;
import org.springframework.security.core.userdetails.UsernameNotFoundException;
@@ -59,7 +60,8 @@ public class ResourceAuthExceptionEntryPoint implements AuthenticationEntryPoint
result.setData(authException.getMessage());
result.setCode(CommonConstants.FAIL);
if (authException instanceof CredentialsExpiredException) {
if (authException instanceof CredentialsExpiredException
|| authException instanceof InsufficientAuthenticationException) {
String msg = SpringSecurityMessageSource.getAccessor().getMessage(
"AbstractUserDetailsAuthenticationProvider.credentialsExpired", authException.getMessage());
result.setMsg(msg);