PlayFramework和Deadbolt重定向onAuthFailure-PlayFrameworkandDeadboltredirectonAuthFailure

2  

There are a couple of different ways you can do this.

有几种不同的方法可以做到这一点。

Approach 1: Repurpose the content value

方法1:重新调整内容值

In this approach, you can use the content value of the constraint annotations to give a hint to the handler. You can use a class-level constraint to define the default redirect, e.g. go to the login page, and method-level constraints to override the default redirect. All constraints have the content value, I'm just using SubjectPresent as an example; you can also mix constraints, e.g. have SubjectPresent at the class level and Restrict at the method level.

在此方法中,您可以使用约束注释的内容值来为处理程序提供提示。您可以使用类级别约束来定义默认重定向,例如转到登录页面,方法级约束覆盖默认重定向。所有约束都有内容值,我只是使用SubjectPresent作为例子;你也可以混合约束,例如在类级别具有SubjectPresent并在方法级别具有Restrict。

@SubjectPresent(cOntent= "login")
public class FooController extends Controller {

    public Result settings() {
        // ...
    }

    public Result somethingElse() {
        // ...
    }

    @SubjectPresent(cOntent= "create-user")
    public Result viewUser() {
        // ...
    }
}

In your DeadboltHandler implementation, you would then need a test on the content:

在DeadboltHandler实现中,您需要对内容进行测试:

public CompletionStage onAuthFailure(final Http.Context context,
                                             final Optional content) {
    return CompletableFuture.supplyAsync(() -> content.map(redirectKey -> {
        final Result result;
        if ("login".equals(redirectKey)) {
            result = [redirect to login action]
        }
        else if ("create-user".equals(redirectKey)) {
            result = [redirect to create user action]
        } else {
            result = [redirect to default authorization failure action]
        }
    }).orElseGet(() -> [redirect to default authorization failure action]), executor);
}

Approach 2: Use the ROUTE_PATTERN tag

方法2:使用ROUTE_PATTERN标记

Instead of specifying keys in the constraint annotations, you can instead use the route specified in the request to determine the requested action.

您可以改为使用请求中指定的路由来确定请求的操作,而不是在约束注释中指定键。

public CompletionStage onAuthFailure(final Http.Context context,
                                             final Optional content) {
    final String route = requestHeader.tags().get(Router.Tags.ROUTE_PATTERN);
    // examine the route and work out what you want to do
}