-
Notifications
You must be signed in to change notification settings - Fork 14.6k
New issue
Have a question about this project? # for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “#”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? # to your account
fix: change 401 response to a 403 for Security Exceptions #17768
fix: change 401 response to a 403 for Security Exceptions #17768
Conversation
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
lgtm, thanks! i wonder if you got the chance to check the other 401 instances in superset? this is probably the big one, but might be worth doing a check of the others
Codecov Report
@@ Coverage Diff @@
## master #17768 +/- ##
==========================================
+ Coverage 67.71% 67.78% +0.06%
==========================================
Files 1604 1604
Lines 64186 64186
Branches 6786 6786
==========================================
+ Hits 43464 43508 +44
+ Misses 18867 18823 -44
Partials 1855 1855
Flags with carried forward coverage won't be shown. Click here to find out more.
Continue to review full report at Codecov.
|
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
LGTM! Thanks for this 🙏
* fix: change 401 to 403 for Security Exceptions * updating tests to reflect new (proper) status code * another test update
* fix: change 401 to 403 for Security Exceptions * updating tests to reflect new (proper) status code * another test update
SUMMARY
This changes the response for security exceptions from 401 (Unauthorized) to 403 (Forbidden). This is a fix because it means when these exceptions are encountered, it will no longer redirect users to the login page, which is intended to only happen for proper 401 errors.
BEFORE/AFTER SCREENSHOTS OR ANIMATED GIF
TESTING INSTRUCTIONS
ADDITIONAL INFORMATION