-
Notifications
You must be signed in to change notification settings - Fork 14.1k
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
fix: change 401 response to a 403 for Security Exceptions #17768
fix: change 401 response to a 403 for Security Exceptions #17768
Conversation
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
lgtm, thanks! i wonder if you got the chance to check the other 401 instances in superset? this is probably the big one, but might be worth doing a check of the others
Codecov Report
@@ Coverage Diff @@
## master #17768 +/- ##
==========================================
+ Coverage 67.71% 67.78% +0.06%
==========================================
Files 1604 1604
Lines 64186 64186
Branches 6786 6786
==========================================
+ Hits 43464 43508 +44
+ Misses 18867 18823 -44
Partials 1855 1855
Flags with carried forward coverage won't be shown. Click here to find out more.
Continue to review full report at Codecov.
|
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
LGTM! Thanks for this 🙏
* fix: change 401 to 403 for Security Exceptions * updating tests to reflect new (proper) status code * another test update
* fix: change 401 to 403 for Security Exceptions * updating tests to reflect new (proper) status code * another test update
SUMMARY
This changes the response for security exceptions from 401 (Unauthorized) to 403 (Forbidden). This is a fix because it means when these exceptions are encountered, it will no longer redirect users to the login page, which is intended to only happen for proper 401 errors.
BEFORE/AFTER SCREENSHOTS OR ANIMATED GIF
TESTING INSTRUCTIONS
ADDITIONAL INFORMATION