Method commence

src/main/java/cms/security/WebSecurityConfig.java:186–204

(HttpServletRequest request, HttpServletResponse response, AuthenticationException authException)

    public AuthenticationEntryPoint authenticationEntryPoint() {
        return new AuthenticationEntryPoint() {
            @Override
            public void commence(HttpServletRequest request, HttpServletResponse response, AuthenticationException authException) throws IOException, ServletException {
                if (!response.isCommitted()) {// 如果响应未已经提交；提交的响应未写入状态码和报头
                    String message = authException.getMessage();
                    if("Full authentication is required to access this resource".equals(authException.getMessage())){
                        message = "需要登录用户才能访问此资源";
                    }
                    if(Strings.CS.startsWith(authException.getMessage(), "Invalid access token")){//判断开始部分是否与二参数相同
                        message = "无效的访问令牌"+Strings.CS.removeStart(authException.getMessage(), "Invalid access token");
                    }

                    //向Header头写入信息
                    response.setHeader("message", UriUtils.encode(message,"UTF-8"));//不支持中文参数   用UriUtils.encode代替URLEncoder.encode,解决空格转换成+号的问题

                    response.sendError(401,//返回401错误  HttpServletResponse.SC_UNAUTHORIZED
                            authException.getMessage());//错误信息

                }
            }

        };
    }