/**

 * @Author: jialing xu

 * @Description: xvjialing@outlook.com

 * @Date: 17:24 2018/8/7

 */

@Service

public class CustomAccessDeniedHandler implements AccessDeniedHandler {

    @Autowired

    private ObjectMapper objectMapper;

    @Override

    public void handle(HttpServletRequest request, HttpServletResponse response, AccessDeniedException accessDeniedException) throws IOException, ServletException {

        response.setContentType("application/json;charset=UTF-8");

        Map map = new HashMap();

        map.put("code", "403");

        map.put("msg", accessDeniedException.getMessage());

        map.put("data","");

        response.setContentType("application/json");

        response.setStatus(HttpServletResponse.SC_OK);

        response.getWriter().write(objectMapper.writeValueAsString(map));

    }

}

    @Autowired

    CustomAccessDeniedHandler accessDeniedHandler;

    @Override

    protected void configure(HttpSecurity http) throws Exception {

        http.csrf().disable()

                .requestMatchers().anyRequest()

                .and()

                .authorizeRequests()

                .antMatchers("/oauth/**").permitAll()

                .antMatchers("/actuator","/actuator/**").permitAll()

                .and()

                .exceptionHandling().accessDeniedHandler(accessDeniedHandler);

    }

}