小编Mar*_*cin的帖子

当我尝试安装Visual Studio Professional(2012,2013,2013 with SP2)时,会发生错误:安装引擎(访问被拒绝).

日志文件显示我的错误:

[0520:1D30][2014-08-04T09:55:40]i000: MUX:  Installation size in bytes for package: vcRuntimeMinimum_x64 MaxAppDrive: 0  MaxSysDrive: 3470762  AppDrive: 0  SysDrive: 3470762
[0520:1D30][2014-08-04T09:55:40]i000: MUX:  Return Code:0x0 Msi Messages:0 Result Detail:RemoveExistingProducts Restart:None
[0520:1D30][2014-08-04T09:55:40]i000: MUX:  Reset execution Result
[0520:1D30][2014-08-04T09:55:40]i000: MUX:  Reset Result
[0520:1D30][2014-08-04T09:55:40]i319: Applied execute package: vcRuntimeMinimum_x64, result: 0x0, restart: None
[22D0:22D4][2014-08-04T09:55:40]i325: Registering dependency: {02a877fe-5dac-4ac0-b869-4b9da00f651c} on package provider: Microsoft.VS.VC_RuntimeMinimumVSU_amd64,v12, package: vcRuntimeMinimum_x64
[22D0:22D4][2014-08-04T09:55:40]e000: Error 0x80070005: Failed to register the dependency on package dependency provider: Microsoft.VS.VC_RuntimeMinimumVSU_amd64,v12
[22D0:22D4][2014-08-04T09:55:40]e000: Error 0x80070005: Failed to register the …

我的休息控制器中有一个后端点，无需身份验证/授权即可访问。它在 WebSecurityConfigurerAdapter 中配置如下：

@Override
public void configure(WebSecurity web) {
    web.ignoring().antMatchers("/api/v1/user");
}

端点对输入数据进行验证（由注释 javax.validation.Valid 提供）。当我发送无效数据时，我收到 401 响应而不是 400。此问题在发送默认 Spring Boot 400 消息的安全端点中不存在。

在调试过程中，我发现在处理 MethodArgumentNotValidException（控制器中发生验证错误时抛出）期间，执行 WebExpressionVoter 并返回值 -1，这意味着“访问被拒绝”。如何配置我的应用程序以忽略公共端点的安全检查？

我知道使用 ControllerAdvice 进行异常处理是一种选择，但是是否可以有默认的 400 消息？

预先感谢您的任何提示！

编辑：

Security filter chain: [
  WebAsyncManagerIntegrationFilter
  SecurityContextPersistenceFilter
  HeaderWriterFilter
  LogoutFilter
  OAuth2AuthenticationProcessingFilter
  RequestCacheAwareFilter
  SecurityContextHolderAwareRequestFilter
  AnonymousAuthenticationFilter
  SessionManagementFilter
  ExceptionTranslationFilter
  FilterSecurityInterceptor
]

我尝试创建spring rest服务,whis是我自己的oauth2资源服务器的高手.我创建了资源服务器:

@Configuration
@EnableResourceServer
protected static class ResourceServer extends ResourceServerConfigurerAdapter {

    @Autowired
    private TokenStore tokenStore;

    @Override
    public void configure(ResourceServerSecurityConfigurer resources) throws Exception {
        resources.tokenStore(tokenStore).resourceId("mobileapp");
    }

    @Override
    public void configure(HttpSecurity http) throws Exception {
        http.authorizeRequests().antMatchers("/api/shop /**").authenticated().and()
                .authorizeRequests().antMatchers("/auth/**").anonymous();
    }

}

和授权服务器:

@Configuration
@EnableAuthorizationServer
protected static class OAuth2Config extends AuthorizationServerConfigurerAdapter {

    @Autowired
    private AuthenticationManager auth;

    @Autowired
    private DataSource dataSource;

    @Autowired
    private BCryptPasswordEncoder passwordEncoder;

    @Bean
    public JdbcTokenStore tokenStore() {
        return new JdbcTokenStore(dataSource);
    }

    @Bean
    protected AuthorizationCodeServices authorizationCodeServices() {
        return new JdbcAuthorizationCodeServices(dataSource);
    }

    @Override
    public …