spring-projects / spring-projects/spring-security-samples
Make `/error` public for samples
Nobody has claimed this yet.
- Dominant language
- Java
- Stars
- 1.8k
- Forks
- 797
- Avg merge
- 3m
- Merged PRs (30d)
- 5
Description
Current behavior:
Some samples (for example, the servlet/spring-boot/java/oauth2/webclient sample) are attempting to show a Spring Boot error page in certain scenarios, but instead show the login page when the user is not authenticated.
Expected behavior:
When the user is not authenticated and an error occurs (for example, calling a resource server causes a 401 Unauthorized response due to a missing access token), the error page should be shown.
Contributor guide
No contributing guide indexed for this repository
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Research direction
Start with the servlet/spring-boot/java/oauth2/webclient sample and inspect its security configuration and error handling. Run the sample while unauthenticated, reproduce the missing-access-token 401, and verify that the Spring Boot error page appears instead of the login page.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- java, spring-boot
- Domain
- authentication, backend
- Issue type
- Bug
- Difficulty
- 3/5
- Estimated time
- 1-2 days
- Activity status
- Stale
- Clarity
- Mostly clear
- Newbie friendliness
- 45/100