Should send "403 - Forbidden" for security exceptions, not "401 - Unauthorized".
This commit is contained in:
1 parent
fbec97f356
commit
fd4b4610ae
1 file changed
+1
-1
+1
-1
@@ -170,7 +170,7 @@ public abstract class GuacamoleHTTPTunnelServlet extends HttpServlet {
|
|||||||
// HTTP response, logging each error appropriately.
|
// HTTP response, logging each error appropriately.
|
||||||
catch (GuacamoleSecurityException e) {
|
catch (GuacamoleSecurityException e) {
|
||||||
logger.warn("Authorization failed.", e);
|
logger.warn("Authorization failed.", e);
|
||||||
sendError(response, HttpServletResponse.SC_UNAUTHORIZED);
|
sendError(response, HttpServletResponse.SC_FORBIDDEN);
|
||||||
}
|
}
|
||||||
catch (GuacamoleResourceNotFoundException e) {
|
catch (GuacamoleResourceNotFoundException e) {
|
||||||
logger.debug("Resource not found.", e);
|
logger.debug("Resource not found.", e);
|
||||||
|
|||||||
Reference in new issue
Block a user