Return error other than 401 when a user doesn't have access to issuer. #767

kevgliss · 2017-04-27T18:26:03Z

Right now we return a 401 when a user attempts to use an issuer they don't have access to. During a clone operation, if an issuer is no longer available this status code, sends the user into a login redirect loop.

…at the user should attempt to authenticate again. Where as 403 indicates the user is authenticated but not allowed to complete an action. Closes Netflix#767

…at the user should attempt to authenticate again. Where as 403 indicates the user is authenticated but not allowed to complete an action. (#804) Closes #767

kevgliss added the bug label Apr 27, 2017

kevgliss added this to the 0.6.x milestone Apr 27, 2017

kevgliss mentioned this issue May 18, 2017

Fixing some confusion between 401 vs 403 error codes. #804

Merged

kevgliss closed this as completed in #804 May 18, 2017

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Return error other than 401 when a user doesn't have access to issuer. #767

Return error other than 401 when a user doesn't have access to issuer. #767

kevgliss commented Apr 27, 2017 •

edited

Loading

Return error other than 401 when a user doesn't have access to issuer. #767

Return error other than 401 when a user doesn't have access to issuer. #767

Comments

kevgliss commented Apr 27, 2017 • edited Loading

kevgliss commented Apr 27, 2017 •

edited

Loading