From 00d175a886c6e8056513c4fb2ec6b96287b1c4f9 Mon Sep 17 00:00:00 2001
From: Vitor Hideyoshi <vitor.h.n.batista@gmail.com>
Date: Tue, 15 Nov 2022 15:03:37 -0300
Subject: [PATCH] Handles OAuth2 Failure

---
 .../backendportfolio/base/security/SecurityConfig.java   | 9 ++++++++-
 .../base/security/oauth/repo/OAuthRequestRepository.java | 2 --
 2 files changed, 8 insertions(+), 3 deletions(-)

diff --git a/src/main/java/com/hideyoshi/backendportfolio/base/security/SecurityConfig.java b/src/main/java/com/hideyoshi/backendportfolio/base/security/SecurityConfig.java
index 2f3e133..1e7196e 100644
--- a/src/main/java/com/hideyoshi/backendportfolio/base/security/SecurityConfig.java
+++ b/src/main/java/com/hideyoshi/backendportfolio/base/security/SecurityConfig.java
@@ -87,7 +87,8 @@ public class SecurityConfig extends WebSecurityConfigurerAdapter {
         http.oauth2Login()
             .authorizationEndpoint()
             .authorizationRequestRepository(this.oAuthRequestRepository)
-            .and().successHandler(this::successHandler);
+            .and().successHandler(this::successHandler)
+            .failureHandler(this::failureHandler);
     }
 
     private void successHandler(HttpServletRequest request,
@@ -104,6 +105,12 @@ public class SecurityConfig extends WebSecurityConfigurerAdapter {
 
     }
 
+    private void failureHandler(
+            HttpServletRequest request,
+            HttpServletResponse response,
+            AuthenticationException e) {
+        throw new AuthenticationInvalidException("Invalid Authentication Attempt.");
+    }
 
     @Bean
     public AuthenticationManager authenticationManagerBean() throws Exception {
diff --git a/src/main/java/com/hideyoshi/backendportfolio/base/security/oauth/repo/OAuthRequestRepository.java b/src/main/java/com/hideyoshi/backendportfolio/base/security/oauth/repo/OAuthRequestRepository.java
index 6df7e6f..7be079c 100644
--- a/src/main/java/com/hideyoshi/backendportfolio/base/security/oauth/repo/OAuthRequestRepository.java
+++ b/src/main/java/com/hideyoshi/backendportfolio/base/security/oauth/repo/OAuthRequestRepository.java
@@ -17,8 +17,6 @@ public class OAuthRequestRepository implements AuthorizationRequestRepository<OA
     public OAuth2AuthorizationRequest loadAuthorizationRequest(HttpServletRequest request) {
 
         String state = request.getParameter("state");
-        log.info(state);
-
         if (Objects.nonNull(state)) {
             return removeAuthorizationRequest(request);
         }