使用HttpServletResponse對象直接設置狀態局限比較大,可以改用以下方式,通過ResponseEntity可以返回我們需要的數據還可以自定義狀態碼。
@RequestMapping("/oauth/token")
public ResponseEntity<Object> token(@RequestParam(value="grant_type",required=false)String grant_type,
@RequestParam(value="client_id",required=false)String client_id,
@RequestParam(value="client_secret",required=false)String client_secret){
OauthError error=new OauthError();
AccessTokenResponse tokenResponse=new AccessTokenResponse();
if(grant_type==null||client_id==null||client_secret==null){
error.setError(ResponseErrorEnum.INVALID_REQUEST.getError());
error.setError_description(ResponseErrorEnum.INVALID_REQUEST.getError_description());
return new ResponseEntity<Object>(error,HttpStatus.OK);
}
if(GrantTypeEnum.getGrantTypeEnumByCode(grant_type)==null){
error.setError(ResponseErrorEnum.UNSUPPORTED_GRANT_TYPE.getError());
error.setError_description(ResponseErrorEnum.UNSUPPORTED_GRANT_TYPE.getError_description());
return new ResponseEntity<Object>(error,HttpStatus.OK);
}
if(grant_type.equals(GrantTypeEnum.CLIENT_CREDENTIALS.getCode())){
tokenResponse=oauthService.clientCredentials(client_id, client_secret);
if(tokenResponse==null){
error.setError(ResponseErrorEnum.INVALID_CLIENT.getError());
error.setError_description(ResponseErrorEnum.INVALID_CLIENT.getError_description());
return new ResponseEntity<Object>(error,HttpStatus.UNAUTHORIZED);
}
}
return new ResponseEntity<Object>(tokenResponse,HttpStatus.OK);
}
