mirror of
http://git.pig4cloud.com/pig/pigx.git
synced 2026-11-08 20:49:00 +08:00
🔒 Fixing security issues. 微信模块权限完善,SQL 维护、token 过期提示优化
This commit is contained in:
1 parent
d1b2fc2e2b
commit
de263a7630
9 files changed
+28
-10
No files matched your search
+3
-1
@@ -26,6 +26,7 @@ import lombok.SneakyThrows;
|
||||
import lombok.extern.slf4j.Slf4j;
|
||||
import org.springframework.http.MediaType;
|
||||
import org.springframework.security.authentication.CredentialsExpiredException;
|
||||
import org.springframework.security.authentication.InsufficientAuthenticationException;
|
||||
import org.springframework.security.core.AuthenticationException;
|
||||
import org.springframework.security.core.SpringSecurityMessageSource;
|
||||
import org.springframework.security.core.userdetails.UsernameNotFoundException;
|
||||
@@ -59,7 +60,8 @@ public class ResourceAuthExceptionEntryPoint implements AuthenticationEntryPoint
|
||||
result.setData(authException.getMessage());
|
||||
result.setCode(CommonConstants.FAIL);
|
||||
|
||||
if (authException instanceof CredentialsExpiredException) {
|
||||
if (authException instanceof CredentialsExpiredException
|
||||
|| authException instanceof InsufficientAuthenticationException) {
|
||||
String msg = SpringSecurityMessageSource.getAccessor().getMessage(
|
||||
"AbstractUserDetailsAuthenticationProvider.credentialsExpired", authException.getMessage());
|
||||
result.setMsg(msg);
|
||||
|
||||
Reference in new issue
Block a user