在 Spring Boot 中，GET 请求返回 200，但 POST 请求返回 403

Question

I've a spring boot application with springdoc-openapi-ui dependency, and without security. The HTTP GET request is going through (status 200). But the HTTP POST request is not going through (status 403). What could be the reason for the 403 return code on the POST request?

pom.xml

<?xml version="1.0" encoding="UTF-8"?>
<project xmlns="http://maven.apache.org/POM/4.0.0"
         xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
         xsi:schemaLocation="http://maven.apache.org/POM/4.0.0 http://maven.apache.org/xsd/maven-4.0.0.xsd">
    <modelVersion>4.0.0</modelVersion>

    <groupId>com.chartinvest</groupId>
    <artifactId>ta</artifactId>
    <version>1.0.0</version>
    <packaging>war</packaging>

    <properties>
        <open-api>1.6.8</open-api>
    </properties>

    <parent>
        <groupId>org.springframework.boot</groupId>
        <artifactId>spring-boot-starter-parent</artifactId>
        <version>2.6.7</version>
    </parent>

    <dependencies>
        <dependency>
            <groupId>org.springdoc</groupId>
            <artifactId>springdoc-openapi-ui</artifactId>
            <version>${open-api}</version>
        </dependency>
        <dependency>
            <groupId>org.springframework.boot</groupId>
            <artifactId>spring-boot-starter-web</artifactId>
        </dependency>
        <dependency>
            <groupId>org.springframework.boot</groupId>
            <artifactId>spring-boot-starter-webflux</artifactId>
        </dependency>
    </dependencies>

</project>

Spring controller class

@RestController
public class TaController {

    @RequestMapping(value = "/ping", method = RequestMethod.GET)
    public @ResponseBody String pingGet() {
        log.info("/ping");
        return "ok";
    }

    @Operation(summary = "test")
    @RequestMapping(value = "/test", method = RequestMethod.POST)
    public String test(String string) {
        log.info("/test");
        return "ok !!";
    }

swagger

Answer 1

RequestParam annotation is missing. Please use below method. You need to invoke POST method with request param key string

And ResponseBody annotation is also missing.

@Operation(summary = "test")
        @RequestMapping(value = "/test", method = RequestMethod.POST)
        public @ResponseBody String test(@RequestParam("string") String string) {
            log.info("/test");
            return "ok !!";
        }

Answer 2

Either you have to use @RequestParam within your test method or you have to remove String string argument :

@RequestMapping(value = "/test", method = RequestMethod.POST)
    public String test(@RequestParam(name= "string")String string) {
        log.info("/test");
        return "ok !!";
    }

Answer 3

this works:

        @Operation(summary = "test")
        @PostMapping("/test")
        public  String test(@RequestBody String string) {
            log.info("/test");
            return "ok !!";
        }

this will expect the string as a body. please make sure you refresh the swagger interface after you apply the fix.

for header:

        @Operation(summary = "test")
        @PostMapping("/test")
        public  String test(@RequestHeader("someHeader") String string){
            log.info("/test");
            return "ok !!";
        }

for path variable:

        @Operation(summary = "test")
        @PostMapping("/test/{somePath}")
        public  String test(@PathVariable("somePath") String string){
            log.info("/test");
            return "ok !!";
        }