Freeman Fang created CXF-7006: --------------------------------- Summary: add an util method in AuthorizationUtils which can take AuthorizationFailure cause Key: CXF-7006 URL: https://issues.apache.org/jira/browse/CXF-7006 Project: CXF Issue Type: Improvement Reporter: Freeman Fang
though by default we just return a 401 without any message to say why the authorization failed for more security reason, in some cases like in Customer AccessTokenValidatorService they may wanna return a 401 with entity message like "token expired" which can bring back more info. We better extend AuthorizationUtils a bit to add the method which can take authorizationFailure cause and build response accordingly. -- This message was sent by Atlassian JIRA (v6.3.4#6332)