search

loris-imageserver / loris

Loris IIIF Image Server
Other
208 stars 87 forks source link

Handle non-expired auth failures better #347

Open azaroth42 opened 7 years ago

azaroth42 commented 7 years ago

This raise should instead reraise an AuthorizerException() rather than the original to ensure that token validation exceptions are handled as 401, not 500 with a stack trace: https://github.com/loris-imageserver/loris/blob/development/loris/authorizer.py#L273

(Feel free to tag as auth and assign me)

bcail commented 6 years ago

@azaroth42 are you planning to work on this issue? If not, could you please give some more detail about the problem? Is it still an issue? I'm seeing the following on line 273 (currently): raise AuthorizerException(message="invalidCredentials: expired")