diff --git a/src/main/java/org/battles/battles/security/SecurityConfig.java b/src/main/java/org/battles/battles/security/SecurityConfig.java index 73d8b4b..4d70215 100644 --- a/src/main/java/org/battles/battles/security/SecurityConfig.java +++ b/src/main/java/org/battles/battles/security/SecurityConfig.java @@ -1,6 +1,8 @@ package org.battles.battles.security; import lombok.RequiredArgsConstructor; +import org.battles.battles.security.jwt.CAccessDeniedHandler; +import org.battles.battles.security.jwt.CAuthenticationEntryPoint; import org.battles.battles.security.jwt.JwtAuthenticationFilter; import org.battles.battles.user.AuthService; import org.springframework.context.annotation.Bean; @@ -52,6 +54,10 @@ public SecurityFilterChain filterChain(HttpSecurity http) throws Exception { .antMatchers("/api/user/**").access("hasRole('ROLE_USER')") .anyRequest().permitAll() .and() + .exceptionHandling().accessDeniedHandler(new CAccessDeniedHandler()) + .and() + .exceptionHandling().authenticationEntryPoint(new CAuthenticationEntryPoint()) + .and() .addFilterBefore(new JwtAuthenticationFilter(authService), UsernamePasswordAuthenticationFilter.class); http.headers().frameOptions().disable(); diff --git a/src/main/java/org/battles/battles/security/jwt/ExceptionController.java b/src/main/java/org/battles/battles/security/jwt/ExceptionController.java index 2c419a3..282c0f5 100644 --- a/src/main/java/org/battles/battles/security/jwt/ExceptionController.java +++ b/src/main/java/org/battles/battles/security/jwt/ExceptionController.java @@ -1,6 +1,7 @@ package org.battles.battles.security.jwt; import io.swagger.annotations.Api; +import org.battles.battles.exception.exception.CAccessDeniedException; import org.battles.battles.exception.exception.CAuthenticationEntryPointException; import org.battles.battles.response.CommonResult; import org.springframework.web.bind.annotation.GetMapping; @@ -19,7 +20,7 @@ public CommonResult entrypointException() { @GetMapping(value = "/accessdenied") public CommonResult accessdeniedException() { - throw new CAuthenticationEntryPointException(); + throw new CAccessDeniedException(); } }