package org.itracker.web.security;
   
   import org.slf4j.Logger;
   import org.slf4j.LoggerFactory;
   import org.springframework.security.access.AccessDeniedException;
   import org.springframework.security.web.DefaultRedirectStrategy;
   import org.springframework.security.web.RedirectStrategy;
   import org.springframework.security.web.access.AccessDeniedHandler;
   
  import javax.servlet.ServletException;
  import javax.servlet.http.HttpServletRequest;
  import javax.servlet.http.HttpServletResponse;
  import java.io.IOException;
  
  public class DefaultAccessDeniedHandler implements AccessDeniedHandler {
      private static final Logger log = LoggerFactory.getLogger(DefaultAccessDeniedHandler.class);
      private RedirectStrategy redirectStrategy = new DefaultRedirectStrategy();
      private String unauthorizedUrl ="/";
  
      @Override
      public void handle(HttpServletRequest request, HttpServletResponse response, AccessDeniedException accessDeniedException) throws IOException, ServletException {
      //
          log.warn("access was denied for " + request.getServletPath(), accessDeniedException);
  
          getRedirectStrategy().sendRedirect(request, response, unauthorizedUrl);
      }
  
      public String getUnauthorizedUrl() {
          return unauthorizedUrl;
      }
  
      public void setUnauthorizedUrl(String unauthorizedUrl) {
          this.unauthorizedUrl = unauthorizedUrl;
      }
  
      public RedirectStrategy getRedirectStrategy() {
          return redirectStrategy;
      }
  
      public void setRedirectStrategy(RedirectStrategy redirectStrategy) {
          this.redirectStrategy = redirectStrategy;
      }
  }