缺少请求 header 'authToken' 调用 RestAPI 方法

Question

我有这个 RestAPI 方法

@GetMapping(path = "/menus",
                consumes = "application/json", 
                produces = "application/json")
    public ResponseEntity<List<MenuPriceSummary>> allMenus(HttpServletRequest request,  @RequestHeader(value="Authorization: Bearer") String authToken) {

        String username = jwtTokenUtil.getUsernameFromToken(authToken);
        User user = userService.findByUserName(username);
        return ResponseEntity.ok(menuService.allMenus(user));

    }

我从 curl 调用的

curl -X GET -H "Content-Type: application/json" -H "Authorization: Bearer eyJhbGciOiJIUzUxMiJ9.eyJzdWIiOiJsb3Blei5hbnRvbmlvODVAZ21haWwuY29tIiwiZXhwIjoxNTk0MTkzNDYwLCJpYXQiOjE1MzM3MsM0NjB9.9pXvdiRMM5fjE4Ur5nqKvwvRLmNWyn6tY6y5fPXOg_BWEW2sJ8vnrLTXPfiA-Sc6Qk2XTwi6FhlIhFEQKip4aQ"  "http://127.0.0.1:1133/canPeris/api/v1/users/menus"

但是我得到了这个错误：

   "status":400,"error":"Bad Request","message":"Missing request header 'Authorization: Bearer' for method parameter of type String"'authToken' for method parameter of type String","tr....

Answer 1

你不能那样使用 @RequestHeader。 headers 中的值被 : 拆分并添加到 Map 中，因此每个包含 : 的值都是不可能的。

您必须将注释更改为 @RequestHeader(value="Authorization")，然后从 authToken 中删除 Bearer。

Answer 2

Spring MVC provides annotation @RequestHeader that can be used to map controller parameter to request header value .

    Can you please change your method to 

    @GetMapping(path = "/menus",
                    consumes = "application/json", 
                    produces = "application/json")
    public ResponseEntity<List<MenuPriceSummary>> allMenus(
                @RequestHeader(value="Authorization") String authToken,
                HttpServletRequest request) {

              String username = jwtTokenUtil.getUsernameFromToken(authToken);
            User user = userService.findByUserName(username);
            return ResponseEntity.ok(menuService.allMenus(user));

        }

You can also make use of Interceptors to validate headers so that other rest endpoints in your application can make use of it .

缺少请求 header 'authToken' 调用 RestAPI 方法

Missing request header 'authToken' calling RestAPI method

rest

spring-boot

resttemplate

restful-authentication