添加spring security

src/main/java/com/yaoyuan/jiscuss/handler/CustomAccessDeniedHandler.java

@@ -0,0 +1,64 @@
+package com.yaoyuan.jiscuss.handler;
+
+import org.slf4j.Logger;
+import org.slf4j.LoggerFactory;
+import org.springframework.http.HttpStatus;
+import org.springframework.security.access.AccessDeniedException;
+import org.springframework.security.web.WebAttributes;
+import org.springframework.security.web.access.AccessDeniedHandler;
+import org.springframework.stereotype.Component;
+
+import javax.servlet.RequestDispatcher;
+import javax.servlet.ServletException;
+import javax.servlet.http.HttpServletRequest;
+import javax.servlet.http.HttpServletResponse;
+import java.io.IOException;
+import java.io.PrintWriter;
+
+/**
+ * 处理无权请求
+ * @author charlie
+ *
+ */
+@Component
+public class CustomAccessDeniedHandler implements AccessDeniedHandler {
+
+	private Logger log = LoggerFactory.getLogger(CustomAccessDeniedHandler.class);
+
+	@Override
+	public void handle(HttpServletRequest request, HttpServletResponse response,
+			AccessDeniedException accessDeniedException) throws IOException, ServletException {
+		boolean isAjax = ControllerTools.isAjaxRequest(request);
+		System.out.println("CustomAccessDeniedHandler handle");
+		if (!response.isCommitted()) {
+			if (isAjax) {
+				String msg = accessDeniedException.getMessage();
+				log.info("accessDeniedException.message:" + msg);
+				String accessDenyMsg = "{\"code\":\"403\",\"msg\":\"没有权限\"}";
+				ControllerTools.print(response, accessDenyMsg);
+			} else {
+				request.setAttribute(WebAttributes.ACCESS_DENIED_403, accessDeniedException);
+				response.setStatus(HttpStatus.FORBIDDEN.value());
+				RequestDispatcher dispatcher = request.getRequestDispatcher("/403");
+				dispatcher.forward(request, response);
+			}
+		}
+
+	}
+
+	public static class ControllerTools {
+		public static boolean isAjaxRequest(HttpServletRequest request) {
+			return "XMLHttpRequest".equals(request.getHeader("X-Requested-With"));
+		}
+
+		public static void print(HttpServletResponse response, String msg) throws IOException {
+			response.setCharacterEncoding("UTF-8");
+			response.setContentType("application/json; charset=utf-8");
+			PrintWriter writer = response.getWriter();
+			writer.write(msg);
+			writer.flush();
+			writer.close();
+		}
+	}
+
+}