Вызов исключения времени выполнения в SpringBoot вызывает исключение «Отказано в доступе» ⇐ JAVA

[Гость]

My springboot application (for blog) is using JWT method of authentication. When user tries to find a blog by the

Код: Выделить всё

pageId

which doesn't exist in the repository, I am trying to throw a

Код: Выделить всё

NoSuchElementException

In BlogService:

Код: Выделить всё

    public BlogResponseDTO findBlogByPageId(String pageId) {
BlogEntity blogEntity = blogRepository.findByPageId(pageId);
if (blogEntity == null) {
throw new NoSuchElementException("Blog not found for pageId: " + pageId);
}
return buildBlogResponseDTO(blogEntity);
}

But it throws

Код: Выделить всё

401 Unauthorized

error as a response.
WebSecurityConfig:

Код: Выделить всё

//Imports
import jakarta.servlet.http.HttpServletResponse;
import org.springframework.beans.factory.annotation.Autowired;
import org.springframework.boot.web.servlet.FilterRegistrationBean;
import org.springframework.context.annotation.Bean;
import org.springframework.context.annotation.Configuration;
import org.springframework.core.annotation.Order;
import org.springframework.security.authentication.AuthenticationManager;
import org.springframework.security.config.annotation.authentication.configuration.AuthenticationConfiguration;
import org.springframework.security.config.annotation.web.builders.HttpSecurity;
import org.springframework.security.config.annotation.web.configuration.EnableWebSecurity;
import org.springframework.security.config.annotation.web.configurers.AbstractHttpConfigurer;
import org.springframework.security.config.http.SessionCreationPolicy;
import org.springframework.security.crypto.bcrypt.BCryptPasswordEncoder;
import org.springframework.security.crypto.password.PasswordEncoder;
import org.springframework.security.web.SecurityFilterChain;
import org.springframework.security.web.authentication.Http403ForbiddenEntryPoint;
import org.springframework.security.web.authentication.UsernamePasswordAuthenticationFilter;
import org.springframework.web.multipart.support.MultipartFilter;

import static org.springframework.security.config.Customizer.withDefaults;

@Configuration
@EnableWebSecurity
public class WebSecurityConfig {
@Autowired
private CustomUserDetailsService userDetailsService;

@Autowired
private JwtRequestFilter jwtRequestFilter;

@Bean
public SecurityFilterChain filterChain(HttpSecurity http) throws Exception {
http
.authorizeHttpRequests((auth) -> auth
.requestMatchers("/auth").permitAll()
.anyRequest().authenticated()
)
.csrf(AbstractHttpConfigurer::disable)
.httpBasic(withDefaults())
.userDetailsService(userDetailsService)
.sessionManagement(sess -> sess.sessionCreationPolicy(SessionCreationPolicy.STATELESS))
.exceptionHandling(httpSecurityExceptionHandlingConfigurer -> {
httpSecurityExceptionHandlingConfigurer.authenticationEntryPoint((request, response, authException) -> {
response.setStatus(HttpServletResponse.SC_UNAUTHORIZED);
response.getWriter().write("Authentication failed: " + authException.getMessage());
});
});
http.addFilterBefore(jwtRequestFilter, UsernamePasswordAuthenticationFilter.class);
return http.build();
}

@Bean
public AuthenticationManager authenticationManager(AuthenticationConfiguration authenticationConfiguration) throws Exception {
return authenticationConfiguration.getAuthenticationManager();
}
}

My application doesn't throw runtime errors from even though I try throwing it explicitly. Can someone help me with what am I missing? If you need any more details, please drop a comment.


Источник: https://stackoverflow.com/questions/781 ... -exception