Change the Bad credentials error response spring security oauth2

问题

I have a AuthorizationServer which uses password grant_type using spring security. I am using this for mobile application, when a user enter username password to log in, the app calls the token endpoint and generate a token if he/she is an authenticated user. This is all handled by password grant_type itself. For a unsuccessful log in it returns below general error with 400 HTTP status code.

{
  "error": "invalid_grant",
  "error_description": "Bad credentials"
}

But for my scenario I need customize this error message. Is their a way to change this error message ?

Note that i tried the suggested duplicate question - Customize authentication failure response in Spring Security using AuthenticationFailureHandler but it uses the formLogin and it's not working with my implementation.

Thank you,

Rajith

回答1:

I couldn't find an answer to this problem for many days. Finally, I got help from one of my colleagues. He asked me to follow this tutorial and it worked for me. Now I could transform the default spring framework response to my response template as follows.

{
    "status": 400,
    "message": "Invalid username or password",
    "timestamp": "2020-06-19T10:58:29.973+00:00",
    "payload": null
 }

But still, we don't know, why authenticationFailure handler is not working. Hope this helps.

来源：https://stackoverflow.com/questions/59942742/change-the-bad-credentials-error-response-spring-security-oauth2