Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Send a static message from HttpStatusServerAccessDeniedHandler #16514

Open
sjohnr opened this issue Jan 31, 2025 · 1 comment · May be fixed by #16528
Open

Send a static message from HttpStatusServerAccessDeniedHandler #16514

sjohnr opened this issue Jan 31, 2025 · 1 comment · May be fixed by #16528
Assignees
@kwondh5217
Labels
in: web An issue in web modules (web, webmvc) status: ideal-for-contribution An issue that we actively are looking for someone to help us with type: enhancement A general enhancement
Milestone
6.5.x

Comments

@sjohnr
Copy link
Member

sjohnr commented Jan 31, 2025

We should send a static message, e.g. "Access Denied" from HttpStatusServerAccessDeniedHandler instead of the exception message.
@sjohnr sjohnr added in: web An issue in web modules (web, webmvc) status: ideal-for-contribution An issue that we actively are looking for someone to help us with type: enhancement A general enhancement labels Jan 31, 2025
@sjohnr sjohnr added this to the 6.5.x milestone Jan 31, 2025
@sjohnr sjohnr mentioned this issue Jan 31, 2025
Merged
kwondh5217 added a commit to kwondh5217/spring-security that referenced this issue Feb 3, 2025
@kwondh5217
Replace dynamic error message with static "Access Denied"
d1b72ca 
Closes spring-projectsgh-16514

Signed-off-by: Daeho Kwon <[email protected]>
@kwondh5217 kwondh5217 linked a pull request Feb 3, 2025 that will close this issue
Open
@kwondh5217
Copy link
Contributor

Hi @sjohnr ! I’ve submitted a PR to address this issue. Could you please take a look when you have time? Thanks!

@sjohnr sjohnr assigned sjohnr and kwondh5217 and unassigned sjohnr Feb 3, 2025
kwondh5217 added a commit to kwondh5217/spring-security that referenced this issue Feb 4, 2025
@kwondh5217
Replace dynamic error message with static "Access Denied"
7037dd8 
Closes spring-projectsgh-16514

Signed-off-by: Daeho Kwon <[email protected]>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees

@kwondh5217 kwondh5217

Labels
in: web An issue in web modules (web, webmvc) status: ideal-for-contribution An issue that we actively are looking for someone to help us with type: enhancement A general enhancement
Projects
None yet
Milestone
6.5.x
Development

Successfully merging a pull request may close this issue.

Replace dynamic error message with static "Access Denied" kwondh5217/spring-security
2 participants
@sjohnr @kwondh5217