Optimize Spring-Security Firewall Deny Request Response 400

CHANGES.md

@@ -12,5 +12,6 @@ Apollo 2.1.0
 * [fix:occur a 400 error request when openapi key's parameter contain "a[0]"](https://github.com/apolloconfig/apollo/pull/4424)
 * [Upgrade mysql-connector-java version to fix possible transaction rollback failure issue](https://github.com/apolloconfig/apollo/pull/4425)
 * [Remove database migration tool Flyway](https://github.com/apolloconfig/apollo/pull/4361)
+* [Optimize Spring-Security Firewall Deny Request Response 400](https://github.com/apolloconfig/apollo/pull/4428)
 ------------------
 All issues and pull requests are [here](https://github.com/apolloconfig/apollo/milestone/11?closed=1)

apollo-common/src/main/java/com/ctrip/framework/apollo/common/ApolloCommonConfig.java

@@ -17,12 +17,25 @@
 package com.ctrip.framework.apollo.common;
 
 import org.springframework.boot.autoconfigure.EnableAutoConfiguration;
+import org.springframework.context.annotation.Bean;
 import org.springframework.context.annotation.ComponentScan;
 import org.springframework.context.annotation.Configuration;
+import org.springframework.http.HttpStatus;
+import org.springframework.security.web.firewall.HttpStatusRequestRejectedHandler;
+import org.springframework.security.web.firewall.RequestRejectedHandler;
 
 @EnableAutoConfiguration
 @Configuration
 @ComponentScan(basePackageClasses = ApolloCommonConfig.class)
 public class ApolloCommonConfig {
 
+  /**
+   * Spring-Security Firewall Deny Request Response 400
+   * @return RequestRejectedHandler
+   */
+  @Bean
+  public RequestRejectedHandler requestRejectedHandler() {
+    return new HttpStatusRequestRejectedHandler(HttpStatus.BAD_REQUEST.value());
+  }
+
 }