diff --git a/inside-notices/src/main/java/cn/axzo/msg/center/http/PrivateHandlerInterceptor.java b/inside-notices/src/main/java/cn/axzo/msg/center/http/PrivateHandlerInterceptor.java index 9bde455f..12dd74bd 100644 --- a/inside-notices/src/main/java/cn/axzo/msg/center/http/PrivateHandlerInterceptor.java +++ b/inside-notices/src/main/java/cn/axzo/msg/center/http/PrivateHandlerInterceptor.java @@ -23,11 +23,14 @@ public class PrivateHandlerInterceptor implements HandlerInterceptor { @Override public boolean preHandle(HttpServletRequest request, @NotNull HttpServletResponse response, - @NotNull Object handler) { + @NotNull Object handler) throws Exception { String token = request.getHeader("token"); boolean tokenValid = PRIVATE_TOKEN.equals(token); - if (!tokenValid) + if (!tokenValid) { log.warn("Invalid private token:{}", token); + response.setStatus(HttpServletResponse.SC_UNAUTHORIZED); + response.getWriter().write("Invalid private token"); + } return tokenValid; }