Cwikius-Spring/spring-security
1
0
Fork 0
mirror of synced 2026-08-04 01:07:02 +00:00
Code Issues Packages Projects Releases Wiki Activity

Throw AuthorizationDeniedException when AuthorizationResult is available

Browse Source 
Closes gh-15706
This commit is contained in:
Marcus Hert Da Coregio
2024-09-09 14:45:48 -03:00
parent 7ac32e07bc
commit 2ff29dc229
2 changed files with 3 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files
web/src/main/java/org/springframework/security/web/access/intercept/AuthorizationFilter.java
+2 -2
View File
@@ -28,9 +28,9 @@ import jakarta.servlet.http.HttpServletRequest;
import jakarta.servlet.http.HttpServletResponse;
import org.springframework.context.ApplicationEventPublisher;
import org.springframework.security.access.AccessDeniedException;
import org.springframework.security.authentication.AuthenticationCredentialsNotFoundException;
import org.springframework.security.authorization.AuthorizationDecision;
import org.springframework.security.authorization.AuthorizationDeniedException;
import org.springframework.security.authorization.AuthorizationEventPublisher;
import org.springframework.security.authorization.AuthorizationManager;
import org.springframework.security.authorization.event.AuthorizationDeniedEvent;
@@ -95,7 +95,7 @@ public class AuthorizationFilter extends GenericFilterBean {
AuthorizationDecision decision = this.authorizationManager.check(this::getAuthentication, request);
this.eventPublisher.publishAuthorizationEvent(this::getAuthentication, request, decision);
if (decision != null && !decision.isGranted()) {
throw new AccessDeniedException("Access Denied");
throw new AuthorizationDeniedException("Access Denied", decision);
}
chain.doFilter(request, response);
}