在您的情况下，由于SecurityFilterChain中的语句addFilterBefore(jwtAuthFilter, UsernamePasswordAuthenticationFilter.class)，在调用ExceptionTranslationFilter之前抛出异常。因此，没有调用ExceptionTranslationFilter。
为了解释为什么JwtAuthenticationEntryPoint没有被触发，当AuthenticationException发生时，注册的AuthenticationEntryPoint的commence方法通常由ExceptionTranslationFilter调用。
需要注意的是，过滤器可能有自己的AuthenticationEntryPoint。例如，在httpBasic的情况下，身份验证由BasicAuthenticationFilter处理，任何问题都会导致调用BasicAuthenticationEntryPoint。
我可以看到3个选项来处理JwtAuthenticationFilter中的错误：

选项一：

在SecurityFilterChain中的AuthorizationFilter之前或ExceptionTranslationFilter之后执行JwtAuthenticationFilter。
例如：

addFilterBefore(new JwtAuthenticationFilter(), AuthorizationFilter.class)
// or
addFilterAfter(new JwtAuthenticationFilter(), ExceptionTranslationFilter.class)

字符串

选项二：

包括在JwtAuthenticationFilter中捕获AuthenticationException并调用JwtAuthenticationEntryPoint的commence方法。
为了说明这一点，让我们看看Spring BasicAuthenticationFilter如何管理AuthenticationException。BasicAuthenticationEntryPoint的commence方法如下所示：

@Override
public void commence(HttpServletRequest request, HttpServletResponse response,
        AuthenticationException authException) throws IOException {
    response.setHeader("WWW-Authenticate", "Basic realm=\"" + this.realmName + "\"");
    response.sendError(HttpStatus.UNAUTHORIZED.value(), HttpStatus.UNAUTHORIZED.getReasonPhrase());
}

型
在检查BasicAuthenticationEntryPoint的源代码时，很明显它试图处理AuthenticationException并随后调用authenticationEntryPoint.commence(request, response, ex)。
应用类似的方法，可以对JwtAuthenticationEntryPoint和JwtAuthenticationFilter进行以下调整：

// JwtAuthenticationEntryPoint
public class JwtAuthenticationEntryPoint implements AuthenticationEntryPoint {
    @Override
    public void commence(HttpServletRequest request, HttpServletResponse response, AuthenticationException authException) throws IOException, ServletException {
        log.error("coming to JwtAuthenticationEntryPoint");
        // Sending a custom error code and message
        var errorMessage = """
            {
                "error" : "true",
                "code" : "AUTH-1210",
                "message" : "jwt filter authentication failed"
            }
        """;
        response.sendError(HttpServletResponse.SC_FORBIDDEN, errorMessage);
    }
}
// JwtAuthenticationFilter
public class JwtAuthenticationFilter extends OncePerRequestFilter {
    private AuthenticationEntryPoint authenticationEntryPoint;
    public JwtAuthenticationFilter(AuthenticationEntryPoint authenticationEntryPoint) {
        this.authenticationEntryPoint = authenticationEntryPoint;
    }
    @Override
    protected void doFilterInternal(HttpServletRequest request, HttpServletResponse response, FilterChain filterChain) throws ServletException, IOException {
        try {
            throw new InvalidTokenException("error in JwtAuthenticationFilter");
        } catch (InvalidTokenException e) {
            authenticationEntryPoint.commence(request, response, e);
        }
    }
    private static final class InvalidTokenException extends AuthenticationException {
        public InvalidTokenException(String msg) {
            super(msg);
        }
    }
}

型
更新SecurityFilterChain配置如下：

.addFilterBefore(new JwtAuthenticationFilter(new JwtAuthenticationEntryPoint()), UsernamePasswordAuthenticationFilter.class)

型
需要注意的是，不需要显式注册JwtAuthenticationEntryPoint。

选项三：

另一种方法是直接在JwtAuthenticationFilter中处理AuthenticationException并发送错误响应。这消除了对JwtAuthenticationEntryPoint的需要。下面是修改后的JwtAuthenticationFilter：

// JwtAuthenticationFilter
public class JwtAuthenticationFilter extends OncePerRequestFilter {
    @Override
    protected void doFilterInternal(HttpServletRequest request, HttpServletResponse response, FilterChain filterChain) throws ServletException, IOException {
        try {
            throw new InvalidTokenException("error in JwtAuthenticationFilter");
        } catch (InvalidTokenException e) {
            var errorMessage = """
                {
                    "error" : "true",
                    "code" : "AUTH-1210",
                    "message" : "jwt filter authentication failed"
                }
            """;
            response.sendError(HttpServletResponse.SC_FORBIDDEN, errorMessage);
        }
    }
    private static final class InvalidTokenException extends AuthenticationException {
        public InvalidTokenException(String msg) {
            super(msg);
        }
    }
}

型
更新SecurityFilterChain配置：

.addFilterBefore(new JwtAuthenticationFilter(), UsernamePasswordAuthenticationFilter.class)

型
选择最适合您的要求并与您的身份验证流程无缝集成的选项。

问题出在过滤器的顺序上。我的自定义过滤器在ExceptionTranslationFilter之前，所以当抛出异常时，ExceptionTranslationFilter无法到达。
这行代码修复了它：

.addFilterBefore(jwtAuthFilter, AuthorizationFilter.class)

字符串