Spring应用集成GitHub OAuth时出现Whitelabel Error Page的修复方案

错误详情 #

出现Whitelabel Error Page，提示应用没有为/error设置显式映射，显示回退页面。
错误类型：Internal Server Error，状态=500
错误信息：由于输入结束，无内容可映射，位置：[来源: (String)""; 行: 1, 列: 0]

触发时机：登录后回调到/auth接口时出现，尝试获取并打印userDataResult.body失败。

相关代码 #

后端Java代码 #

@RestController
public class LoginController {
    private String clientSecret = "541a3c6bdca41a233d593ed263f628915317c434";
    private String clientId = "f3cc203f5df4b2e30d5c";

    @GetMapping("/auth")
    public ResponseEntity<String> auth(@RequestBody String code) {
        String accessTokenString = String.format(
                "https://github.com/login/oauth/access_token?client_id=%s&client_secret=%s&code=%s", clientId,
                clientSecret, code);

        HttpClient client = HttpClient.newHttpClient();
        URI accessTokenUri = URI.create(accessTokenString);
        HttpRequest.Builder accessTokenBuilder = HttpRequest.newBuilder().uri(accessTokenUri);
        HttpRequest accessTokenRequest = accessTokenBuilder.POST(HttpRequest.BodyPublishers.noBody())
                .header("Accept", "Application/json").build();

        HttpResponse<String> accessTokenResult = null;
        try {
            accessTokenResult = client.send(accessTokenRequest, HttpResponse.BodyHandlers.ofString());
        } catch (IOException | InterruptedException e) {
            e.printStackTrace();
        }
        ObjectMapper mapper = new ObjectMapper();
        HashMap<String, Object> resultBody = new HashMap<>();
        try {
            resultBody = mapper.readValue(accessTokenResult.body(), HashMap.class);
        } catch (JsonProcessingException e1) {
            e1.printStackTrace();
        }
        String accessToken = (String) resultBody.get("access_token");

        URI userDataUri = URI.create("https://api.github.com/user");
        HttpRequest.Builder userDataBuilder = HttpRequest.newBuilder().uri(userDataUri);
        HttpRequest req = userDataBuilder.GET().header("Authorization", String.format("token %s", accessToken)).build();
        try {
            HttpResponse<String> userDataResult = client.send(req, HttpResponse.BodyHandlers.ofString());
            GithubUser user = mapper.readValue(userDataResult.body(), GithubUser.class);
            System.out.println(userDataResult.body());

        } catch (Exception e) {
            e.printStackTrace();
        }


        return null;
    }
}

测试HTML页面 #

<a href="https://github.com/login/oauth/authorize?client_id=f3cc203f5df4b2e30d5c&scope=user"><h1>Click to login using github</h1></a>

已排查：检查过token是否为空，尝试打印accessTokenResult.body()，问题仍未解决。

问题分析与解决方案 #

核心错误原因 #

1. GET接口误用@RequestBody接收参数：GitHub OAuth回调是通过GET请求将code作为URL参数传递的，而你的auth方法用@RequestBody接收，这会导致Spring尝试从请求体读取内容，但GET请求没有请求体，直接触发“无内容可映射”的错误。
2. 空指针风险未处理：accessTokenResult在异常场景下会保持null，直接调用accessTokenResult.body()会触发空指针异常，导致500错误。
3. 返回null导致响应异常：方法返回null会让Spring无法生成合法的HTTP响应，进一步引发服务器内部错误。

修复步骤 #

1. 修改参数接收方式：将@RequestBody String code改为@RequestParam String code，从URL参数中正确获取授权码。
2. 增加空指针与异常处理：在处理accessTokenResult前先判空，异常捕获后返回明确的错误响应，避免后续代码执行出错。
3. 返回合法响应：方法最后返回有效的ResponseEntity，比如返回用户信息或成功提示，确保Spring能生成正常响应。

修复后的代码示例 #

@RestController
public class LoginController {
    private String clientSecret = "541a3c6bdca41a233d593ed263f628915317c434";
    private String clientId = "f3cc203f5df4b2e30d5c";

    @GetMapping("/auth")
    public ResponseEntity<?> auth(@RequestParam String code) {
        String accessTokenString = String.format(
                "https://github.com/login/oauth/access_token?client_id=%s&client_secret=%s&code=%s", clientId,
                clientSecret, code);

        HttpClient client = HttpClient.newHttpClient();
        URI accessTokenUri = URI.create(accessTokenString);
        HttpRequest accessTokenRequest = HttpRequest.newBuilder()
                .uri(accessTokenUri)
                .POST(HttpRequest.BodyPublishers.noBody())
                .header("Accept", "Application/json")
                .build();

        HttpResponse<String> accessTokenResult;
        try {
            accessTokenResult = client.send(accessTokenRequest, HttpResponse.BodyHandlers.ofString());
        } catch (IOException | InterruptedException e) {
            e.printStackTrace();
            return ResponseEntity.status(HttpStatus.INTERNAL_SERVER_ERROR).body("获取access_token失败");
        }

        ObjectMapper mapper = new ObjectMapper();
        HashMap<String, Object> resultBody;
        try {
            resultBody = mapper.readValue(accessTokenResult.body(), HashMap.class);
        } catch (JsonProcessingException e) {
            e.printStackTrace();
            return ResponseEntity.status(HttpStatus.INTERNAL_SERVER_ERROR).body("解析access_token响应失败");
        }

        String accessToken = (String) resultBody.get("access_token");
        if (accessToken == null) {
            return ResponseEntity.status(HttpStatus.BAD_REQUEST).body("未获取到有效的access_token");
        }

        URI userDataUri = URI.create("https://api.github.com/user");
        HttpRequest userDataRequest = HttpRequest.newBuilder()
                .uri(userDataUri)
                .GET()
                .header("Authorization", String.format("token %s", accessToken))
                .build();

        try {
            HttpResponse<String> userDataResult = client.send(userDataRequest, HttpResponse.BodyHandlers.ofString());
            GithubUser user = mapper.readValue(userDataResult.body(), GithubUser.class);
            System.out.println(userDataResult.body());
            return ResponseEntity.ok(user);
        } catch (Exception e) {
            e.printStackTrace();
            return ResponseEntity.status(HttpStatus.INTERNAL_SERVER_ERROR).body("获取用户信息失败");
        }
    }
}

额外注意事项 #

• 确保GitHub OAuth应用的回调URL与你的/auth接口地址完全一致（在GitHub开发者后台配置）。
• 不要硬编码clientSecret和clientId，建议通过application.properties等配置文件读取，避免敏感信息泄露。
• 可以实现全局异常处理器，统一处理异常并返回友好响应，替代直接打印堆栈信息。

内容的提问来源于stack exchange，提问作者Pooya Afshari