Security exception handling mechanism

One 、 Outline the exception mechanism

Spring security There are two main types of exceptions in ： Authentication exception （AuthenticationException） And permission exception （AccessDeniedException）, Other exceptions are thrown , hand spring To deal with .

Authentication exception class

 

Permission exception

 

Two 、 Principle analysis

Spring security The exception handling task in is mainly in ExceptionTranslationFilter Completed in the filter . The filter mainly deals with AuthenticationException and AccessDeniedException Exception of type , Other exceptions will continue to be thrown , Give it to the upper container for disposal .
stay WebSecurityConfigurerAdapter#getHttp Method HttpSecurity When initializing , It's called exceptionHandling() Method to configure ExceptionTranslationFilter filter ：

protected final HttpSecurity getHttp() throws Exception {
    // ...
    if (!this.disableDefault