Merge branch 'dev'

q-box-team · Jan 7, 2024 · 1d6df13 · 1d6df13
2 parents 05e5990 + ffe8787
commit 1d6df13
Showing 1 changed file with 8 additions and 0 deletions.
diff --git a/src/main/kotlin/site/qbox/qboxserver/global/security/SecurityConfig.kt b/src/main/kotlin/site/qbox/qboxserver/global/security/SecurityConfig.kt
@@ -10,6 +10,7 @@ import org.springframework.security.config.annotation.web.configuration.EnableWe
 import org.springframework.security.crypto.bcrypt.BCryptPasswordEncoder
 import org.springframework.security.crypto.password.PasswordEncoder
 import org.springframework.security.web.SecurityFilterChain
+import org.springframework.security.web.authentication.AuthenticationFailureHandler
 import org.springframework.security.web.authentication.AuthenticationSuccessHandler
 import org.springframework.security.web.authentication.logout.LogoutSuccessHandler
 import org.springframework.web.cors.CorsConfiguration
@@ -33,6 +34,7 @@ class SecurityConfig(
                 it.usernameParameter("email")
                 it.passwordParameter("password")
                 it.successHandler(authenticationSuccessHandler())
+                it.failureHandler(authenticationFailureHandler())
             }
             .logout {
                 it.logoutUrl("/logout")
@@ -63,6 +65,12 @@ class SecurityConfig(
             res.status = HttpServletResponse.SC_OK
         }
 
+    @Bean
+    fun authenticationFailureHandler() =
+        AuthenticationFailureHandler { _, res, _ ->
+            res.status = HttpServletResponse.SC_UNAUTHORIZED
+        }
+
     @Bean
     fun logoutSuccessHandler() =
         LogoutSuccessHandler { _, res, _ ->