xuqmGroup/XuqmGroup-Server
0
0
派生 0
代码 工单 合并请求 版本发布 百科 动态

fix(api): return forbidden for ownership denials

浏览代码
这个提交包含在：
XuqmGroup 2026-07-29 00:55:51 +08:00
父节点 63cc21d812
当前提交 f24e0356a7
共有 2 个文件被更改，包括 6 次插入 和 6 次删除
显示统计 下载 Patch 文件 下载 Diff 文件 展开所有文件 折叠所有文件

6
im-service/src/main/java/com/xuqm/im/controller/GlobalExceptionHandler.java
查看文件

@ -8,7 +8,7 @@ import org.slf4j.LoggerFactory;
import org.springframework.http.HttpStatus;
import org.springframework.http.ResponseEntity;
import org.springframework.http.converter.HttpMessageNotReadableException;
import org.springframework.security.authorization.AuthorizationDeniedException;
import org.springframework.security.access.AccessDeniedException;
import org.springframework.security.core.Authentication;
import org.springframework.security.core.context.SecurityContextHolder;
import org.springframework.web.HttpRequestMethodNotSupportedException;
@ -69,8 +69,8 @@ public class GlobalExceptionHandler {
.body(ApiResponse.error(405, "请求方法不支持: " + ex.getMethod()));
}
@ExceptionHandler(AuthorizationDeniedException.class)
public ResponseEntity<ApiResponse<Void>> handleAuthorizationDenied(AuthorizationDeniedException ex, HttpServletRequest request) {
@ExceptionHandler(AccessDeniedException.class)
public ResponseEntity<ApiResponse<Void>> handleAuthorizationDenied(AccessDeniedException ex, HttpServletRequest request) {
Authentication authentication = SecurityContextHolder.getContext().getAuthentication();
String principal = authentication == null ? "anonymous" : String.valueOf(authentication.getPrincipal());
String authorities = authentication == null ? "[]" : authentication.getAuthorities().toString();

6
update-service/src/main/java/com/xuqm/update/controller/GlobalExceptionHandler.java
查看文件

@ -8,7 +8,7 @@ import org.slf4j.LoggerFactory;
import org.springframework.http.HttpStatus;
import org.springframework.http.ResponseEntity;
import org.springframework.http.converter.HttpMessageNotReadableException;
import org.springframework.security.authorization.AuthorizationDeniedException;
import org.springframework.security.access.AccessDeniedException;
import org.springframework.security.core.Authentication;
import org.springframework.security.core.context.SecurityContextHolder;
import org.springframework.web.HttpRequestMethodNotSupportedException;
@ -71,8 +71,8 @@ public class GlobalExceptionHandler {
.body(ApiResponse.error(405, "请求方法不支持: " + ex.getMethod()));
}
@ExceptionHandler(AuthorizationDeniedException.class)
public ResponseEntity<ApiResponse<Void>> handle(AuthorizationDeniedException ex, HttpServletRequest request) {
@ExceptionHandler(AccessDeniedException.class)
public ResponseEntity<ApiResponse<Void>> handle(AccessDeniedException ex, HttpServletRequest request) {
Authentication auth = SecurityContextHolder.getContext().getAuthentication();
String principal = auth == null ? "anonymous" : String.valueOf(auth.getPrincipal());
String authorities = auth == null ? "[]" : auth.getAuthorities().toString();