Return JSON error if user hasn't rights

Question

Return JSON error if user hasn't rights

Closed this issue 8 years ago · 3 comments

JSON error should be returned if user hasn't admin rights (for example if enter /admin**, /users/*/events as subscriber).
This issue was creatd while task #130 execution.

Answer 1 · 2016-03-19T21:44:18.000Z

Spring Security return
Status = 401 Error; message = Unauthorized; body =
After that server (tomcat, jetty) generate own Response Body.
If we wanna get JSON error message into Response Body we have to create own error Handler
@romach do you agree?
@AndriyBaibak: 1:30

Answer 2 · 2016-03-19T22:56:44.000Z

@roma-ilnitsky as I know when user hasn't rights to enter /admin**:

Spring Security generates AccessDeniedException;
using ExceptionTranslationFilter it delegates this exception to AccessDeniedHandlerImpl.
so, we need to create custom AccessDeniedHandler;

Answer 3 · 2016-03-19T23:24:32.000Z

@romach I change RestAuthenticationEntryPoint it's work fine )