Spring-从筛选器返回JSON格式的错误消息

Spring-从筛选器返回JSON格式的错误消息,json,spring,spring-boot,httpresponse,servlet-filters,Json,Spring,Spring Boot,Httpresponse,Servlet Filters,我正在开发一个Spring Boot REST应用程序 我注册了一个自定义AuthenticationEntryPoint,如果用户不提供凭据,它将返回“401 Unauthorized”错误 @Component public class CustomAuthenticationEntryPoint implements AuthenticationEntryPoint { @Override public void commence(HttpServletRequest r

我正在开发一个Spring Boot REST应用程序

我注册了一个自定义AuthenticationEntryPoint,如果用户不提供凭据,它将返回“401 Unauthorized”错误

@Component
public class CustomAuthenticationEntryPoint implements AuthenticationEntryPoint {

    @Override
    public void commence(HttpServletRequest request, HttpServletResponse response, AuthenticationException authException) throws IOException {
        response.sendError(HttpServletResponse.SC_UNAUTHORIZED, "Unauthorized");
    }
}
这非常有效,并返回JSON格式,如下所示:

{
  "timestamp": 1465230610451,
  "status": 401,
  "error": "Unauthorized",
  "exception": "org.springframework.security.authentication.BadCredentialsException",
  "message": "Unauthorized",
  "path": "/webapp/login"
}
现在,我使用以下
doFilter()
override向应用程序添加了一个
Filter

@ Override
public void doFilter(ServletRequest request, ServletResponse response, FilterChain chain)throws IOException, ServletException {
    try {
        // Here be some code that fails.
    } catch (Exception e) {
        HttpServletResponse httpServletResponse = (HttpServletResponse) response;
        httpServletResponse.sendError(HttpServletResponse.SC_UNAUTHORIZED, "Unauthorized");
    }

    chain.doFilter(request, response);
}
但是,与上面显示的JSON格式的DefaultErrorAttributes不同,此代码返回默认的Tomcat“Error report”HTML页面

为什么会发生这种情况?在这两种情况下,使两条错误消息保持一致(JSON格式)的最佳方法是什么?

原始链接

移动
chain.doFilter(请求、响应)编码到try块中。
public class TestFilter implements Filter {

@Override
public void init(FilterConfig filterConfig) throws ServletException {

}

@Override
public void doFilter(ServletRequest request, ServletResponse response, FilterChain chain) throws IOException,ServletException {

    if(ANY CONDITION){
        //ANY POJO CLASS
        // ErrorResponse is a public return object that you define yourself
        ErrorResponse errorResponse = new ErrorResponse();
        errorResponse.setCode(401);
        errorResponse.setMessage("Unauthorized Access");

        byte[] responseToSend = restResponseBytes(errorResponse);
        ((HttpServletResponse) response).setHeader("Content-Type", "application/json");
        ((HttpServletResponse) response).setStatus(401);
        response.getOutputStream().write(responseToSend);
        return;
    }

    //ANY OTHER BUSINESS LOGIC
    chain.doFilter(request, response);
}

@Override
public void destroy() {

}

private byte[] restResponseBytes(ErrorResponse eErrorResponse) throws IOException {
    String serialized = new ObjectMapper().writeValueAsString(eErrorResponse);
    return serialized.getBytes();
}  }