Hey I am doing a custom AuthenticationProvider and intercept kotlinlang #ktor

Channels

kotlin-foundation

compose-android

ohio-kotlin-users

kotlin-by-example

sofl-user-group

kotlin-multiplatform-contest

tricity-kotlin-user-group

kotlin-in-action

android-databinding

cincinnati-user-group

fluid-libraries

codemash-precompiler

kotlingforbeginners

jhipster-kotlin

prozis-android-backup

realworldkotlin

graviton-browser

spring-security

domain-driven-design

connect-audit-events

swiss-user-group

effectivekotlin

refactoring-to-kotlin

russian-kotlinasfirst

androidgithubprojects

introduce-yourself

pocketgitclient

effective-kotlin

algolialibraries

lambdaworld_cadiz

intellij-tricks

kotlin-pakistan

navigation-architecture-component

strife-discord-lib

machinelearningbawas

leedskotlinusergroup

stayhungrystayfoolish

kotest-contributors

practical-functional-programming

swagger-gradle-codegen

100daysofkotlin

kotlinultimatechallenge

pattern-matching

kotlinforbeginners

competitive-programming

compose-ui-showcase

competitivecoding

kotlin-data-storage

skia-wasm-interop-temp

java-to-kotlin-refactoring

event21-community-content

androidx-xprocessing

embedded-kotlin

fb-internal-demo

image-processing

myndocs-oauth2-server

kotlintest-devs

beepiz-libraries

kotlinprogrammers

cscenter-course-2016

k2-early-adopters

intellij-plugins

language-proposals

library-development

refreshversions

language-evolution

kotlinx-datetime

framework-elide

compose-desktop

jvm-ir-backend-feedback

android-architecture

100daysofkotlin-2021

github-workflows-kt

python-contributors

squarelibraries

arrow-contributors

codingconventions

getting-started

Title

a

Anders Sveen

04/28/2020, 8:20 AM

Hey. I am doing a custom AuthenticationProvider and intercepting calls (both RequestAuthentication and CheckAuthentication) and returning av 401 when my custom checks fail. But it still reaches the endpoint code even though authentication fails. Is there some way to stop further processing? I have tried (a wild guess) to

return@intercept finish()

but it still continues processing.... Any idea?

Found the answer... Had to issue a challenge... Not entirely sure why (the call chain can be quite long), but at least it works. 🙂

context.challenge("pbAuth", AuthenticationFailedCause.InvalidCredentials) {
    call.respond(UnauthorizedResponse())
    if (!it.completed && call.response.status() != null) {
        it.complete()
    }
}

5 Views

#ktor Join Slack