✨ 添加新特性。 定制 entrypoint 未绑定异常返回

pigx-common/pigx-common-security/src/main/java/com/pig4cloud/pigx/common/security/mobile/MobileAuthenticationEntryPoint.java

@@ -0,0 +1,82 @@
+/*
+ *    Copyright (c) 2018-2025, lengleng All rights reserved.
+ *
+ * Redistribution and use in source and binary forms, with or without
+ * modification, are permitted provided that the following conditions are met:
+ *
+ * Redistributions of source code must retain the above copyright notice,
+ * this list of conditions and the following disclaimer.
+ * Redistributions in binary form must reproduce the above copyright
+ * notice, this list of conditions and the following disclaimer in the
+ * documentation and/or other materials provided with the distribution.
+ * Neither the name of the pig4cloud.com developer nor the names of its
+ * contributors may be used to endorse or promote products derived from
+ * this software without specific prior written permission.
+ * Author: lengleng (wangiegie@gmail.com)
+ */
+
+package com.pig4cloud.pigx.common.security.mobile;
+
+import org.springframework.http.HttpHeaders;
+import org.springframework.http.HttpStatus;
+import org.springframework.http.ResponseEntity;
+import org.springframework.security.core.AuthenticationException;
+import org.springframework.security.oauth2.common.OAuth2AccessToken;
+import org.springframework.security.oauth2.common.exceptions.OAuth2Exception;
+import org.springframework.security.oauth2.provider.error.AbstractOAuth2SecurityExceptionHandler;
+import org.springframework.security.web.AuthenticationEntryPoint;
+import org.springframework.util.StringUtils;
+
+import javax.servlet.ServletException;
+import javax.servlet.http.HttpServletRequest;
+import javax.servlet.http.HttpServletResponse;
+import java.io.IOException;
+
+/**
+ * @author lengleng
+ * @date 2018/8/16
+ * 手机号登录异常处理
+ */
+public class MobileAuthenticationEntryPoint extends AbstractOAuth2SecurityExceptionHandler implements
+	AuthenticationEntryPoint {
+	private static final String WWW_AUTHENTICATE = "WWW-Authenticate";
+	private static final String SUFFIX = ",";
+
+	@Override
+	public void commence(HttpServletRequest request, HttpServletResponse response, AuthenticationException authException)
+		throws IOException, ServletException {
+		doHandle(request, response, authException);
+	}
+
+	@Override
+	protected ResponseEntity<OAuth2Exception> enhanceResponse(ResponseEntity<OAuth2Exception> response, Exception exception) {
+		HttpHeaders headers = response.getHeaders();
+		String existing = null;
+		if (headers.containsKey(WWW_AUTHENTICATE)) {
+			existing = extractTypePrefix(headers.getFirst("WWW-Authenticate"));
+		}
+		StringBuilder builder = new StringBuilder();
+		String typeName = OAuth2AccessToken.BEARER_TYPE;
+		builder.append(typeName + " ");
+		String realmName = "oauth";
+		builder.append("realm=\"" + realmName + "\"");
+		if (existing != null) {
+			builder.append(", " + existing);
+		}
+		HttpHeaders update = new HttpHeaders();
+		update.putAll(response.getHeaders());
+		update.set("WWW-Authenticate", builder.toString());
+		return new ResponseEntity<>(response.getBody(), update, HttpStatus.EXPECTATION_FAILED);
+	}
+
+	private String extractTypePrefix(String header) {
+		String existing = header;
+		String[] tokens = existing.split(" +");
+		if (tokens.length > 1 && !tokens[0].endsWith(SUFFIX)) {
+			existing = StringUtils.arrayToDelimitedString(tokens, " ").substring(existing.indexOf(" ") + 1);
+		}
+		return existing;
+	}
+
+}
+

pigx-common/pigx-common-security/src/main/java/com/pig4cloud/pigx/common/security/mobile/MobileAuthenticationFilter.java

@@ -21,10 +21,17 @@ import com.pig4cloud.pigx.common.core.constant.SecurityConstants;
 import lombok.Getter;
 import lombok.Setter;
 import org.springframework.http.HttpMethod;
+import org.springframework.security.authentication.AuthenticationEventPublisher;
 import org.springframework.security.authentication.AuthenticationServiceException;
+import org.springframework.security.authentication.BadCredentialsException;
 import org.springframework.security.core.Authentication;
 import org.springframework.security.core.AuthenticationException;
+import org.springframework.security.core.context.SecurityContextHolder;
+import org.springframework.security.core.userdetails.UsernameNotFoundException;
+import org.springframework.security.oauth2.provider.error.OAuth2AuthenticationEntryPoint;
+import org.springframework.security.web.AuthenticationEntryPoint;
 import org.springframework.security.web.authentication.AbstractAuthenticationProcessingFilter;
+import org.springframework.security.web.authentication.preauth.PreAuthenticatedAuthenticationToken;
 import org.springframework.security.web.util.matcher.AntPathRequestMatcher;
 
 import javax.servlet.http.HttpServletRequest;
@@ -37,6 +44,8 @@ import javax.servlet.http.HttpServletResponse;
  */
 public class MobileAuthenticationFilter extends AbstractAuthenticationProcessingFilter {
 	private static final String SPRING_SECURITY_FORM_MOBILE_KEY = "mobile";
+	private AuthenticationEventPublisher eventPublisher = new MobileAuthenticationFilter.NullEventPublisher();
+	private AuthenticationEntryPoint authenticationEntryPoint = new MobileAuthenticationEntryPoint();
 	@Getter
 	@Setter
 	private String mobileParameter = SPRING_SECURITY_FORM_MOBILE_KEY;
@@ -68,7 +77,24 @@ public class MobileAuthenticationFilter extends AbstractAuthenticationProcessing
 
 		setDetails(request, mobileAuthenticationToken);
 
-		return this.getAuthenticationManager().authenticate(mobileAuthenticationToken);
+		try {
+			return this.getAuthenticationManager().authenticate(mobileAuthenticationToken);
+
+		} catch (Exception failed) {
+			SecurityContextHolder.clearContext();
+			logger.debug("Authentication request failed: " + failed);
+
+			eventPublisher.publishAuthenticationFailure(new BadCredentialsException(failed.getMessage(), failed),
+				new PreAuthenticatedAuthenticationToken("access-token", "N/A"));
+
+			try {
+				authenticationEntryPoint.commence(request, response,
+					new UsernameNotFoundException(failed.getMessage(), failed));
+			} catch (Exception e) {
+				logger.error("authenticationEntryPoint handle error:{}", failed);
+			}
+		}
+		return null;
 	}
 
 	private String obtainMobile(HttpServletRequest request) {
@@ -79,5 +105,15 @@ public class MobileAuthenticationFilter extends AbstractAuthenticationProcessing
 							MobileAuthenticationToken authRequest) {
 		authRequest.setDetails(authenticationDetailsSource.buildDetails(request));
 	}
+
+	private static final class NullEventPublisher implements AuthenticationEventPublisher {
+		@Override
+		public void publishAuthenticationFailure(AuthenticationException exception, Authentication authentication) {
+		}
+
+		@Override
+		public void publishAuthenticationSuccess(Authentication authentication) {
+		}
+	}
 }
 

pigx-common/pigx-common-security/src/main/java/com/pig4cloud/pigx/common/security/mobile/MobileAuthenticationProvider.java

@@ -20,10 +20,16 @@ package com.pig4cloud.pigx.common.security.mobile;
 import com.pig4cloud.pigx.common.security.util.PigxUserDetailsService;
 import lombok.Getter;
 import lombok.Setter;
+import lombok.extern.slf4j.Slf4j;
+import org.springframework.context.support.MessageSourceAccessor;
+import org.springframework.security.authentication.AuthenticationEventPublisher;
 import org.springframework.security.authentication.AuthenticationProvider;
+import org.springframework.security.authentication.BadCredentialsException;
 import org.springframework.security.core.Authentication;
 import org.springframework.security.core.AuthenticationException;
+import org.springframework.security.core.SpringSecurityMessageSource;
 import org.springframework.security.core.userdetails.UserDetails;
+import org.springframework.security.oauth2.provider.authentication.OAuth2AuthenticationProcessingFilter;
 
 /**
  * @author lengleng
@@ -31,7 +37,9 @@ import org.springframework.security.core.userdetails.UserDetails;
  * 手机登录校验逻辑
  * 验证码登录、社交登录
  */
+@Slf4j
 public class MobileAuthenticationProvider implements AuthenticationProvider {
+	private MessageSourceAccessor messages = SpringSecurityMessageSource.getAccessor();
 	@Getter
 	@Setter
 	private PigxUserDetailsService userDetailsService;
@@ -42,7 +50,14 @@ public class MobileAuthenticationProvider implements AuthenticationProvider {
 
 		String principal = mobileAuthenticationToken.getPrincipal().toString();
 		UserDetails userDetails = userDetailsService.loadUserBySocial(principal);
+		if (userDetails == null) {
+			log.debug("Authentication failed: no credentials provided");
 
+			throw new BadCredentialsException(messages.getMessage(
+				"AbstractUserDetailsAuthenticationProvider.noopBindAccount",
+				"Noop Bind Account"));
+
+		}
 
 		MobileAuthenticationToken authenticationToken = new MobileAuthenticationToken(userDetails, userDetails.getAuthorities());
 		authenticationToken.setDetails(mobileAuthenticationToken.getDetails());