Should send "403 - Forbidden" for security exceptions, not "401 - Unauthorized".

This commit is contained in:
Michael Jumper
2012-03-25 23:09:40 -07:00
parent fbec97f356
commit fd4b4610ae

View File

@@ -170,7 +170,7 @@ public abstract class GuacamoleHTTPTunnelServlet extends HttpServlet {
// HTTP response, logging each error appropriately. // HTTP response, logging each error appropriately.
catch (GuacamoleSecurityException e) { catch (GuacamoleSecurityException e) {
logger.warn("Authorization failed.", e); logger.warn("Authorization failed.", e);
sendError(response, HttpServletResponse.SC_UNAUTHORIZED); sendError(response, HttpServletResponse.SC_FORBIDDEN);
} }
catch (GuacamoleResourceNotFoundException e) { catch (GuacamoleResourceNotFoundException e) {
logger.debug("Resource not found.", e); logger.debug("Resource not found.", e);