使用自定义AuthenticationEntryPoint：
package com.example.spring.security// imports herepublic class AjaxAwareAuthenticationEntryPoint extends LoginUrlAuthenticationEntryPoint { public AjaxAwareAuthenticationEntryPoint(final String loginFormUrl) { super(loginFormUrl); } @Override public void commence(final HttpServletRequest request, final HttpServletResponse response, final AuthenticationException authException) throws IOException, ServletException { if ("XMLHttpRequest".equals(request.getHeader("X-Requested-With"))) { response.sendError(403, "Forbidden"); } else { super.commence(request, response, authException); } }}定义一个bean并
entry-point-ref在
<http>element中使用它：
<http entry-point-ref="authenticationEntryPoint"> <!-- more configuration here --></http><bean id="authenticationEntryPoint" > <constructor-arg value="/login.jsp"/></bean>
