The Entry-point-ref property , in English, means an entry point reference. Why do you need this entry point? This entry point is actually simply quoted by Exceptiontranslationfilter. The Exceptiontranslationfilter filter has been introduced in the previous role is abnormal translation, in the event of authentication anomalies, access anomalies, through the entry point to determine the operation of redirect, forward. For example, now is the Form-login authentication method, if does not pass the Usernamepasswordauthenticationfilter authentication directly accesses a protected URL, After the Exceptiontranslationfilter filter is processed, the access reject exception is captured, and the jump action is given to the entry point for processing. The corresponding entry point class for Form-login is Loginurlauthenticationentrypoint, The commence method of this entry point class is redirect or forward to the specified URL (the Login-page attribute of the form-login tag)
I am using the restfull style, so the classes referenced by Entry-point-ref are as follows
public class Unauthorizedentrypoint implements Authenticationentrypoint
{
@Override
public void commence (HttpServletRequest request, httpservletresponse response, Authenticationexception Authexcepti On
Throws IOException, Servletexception
{
Response.senderror (
Httpservletresponse.sc_unauthorized,
"Unauthorized:authentication token was either missing or invalid.");
}
}
The Entry-point-ref property in Spring-security