[SHIRO-818] Return other status codes for AuthorizationExceptions.

 - shorten the test using Apache CXF.
 - Log exceptions.
 - do not map the class AuthorizationException itself (for now).
   This exception is only thrown from the aop support (which might need to be changed to a subclass)
   and from Jdbc/Ldap-Realms. But those should lead to internal server errors, as
   internal code has thrown an exception.

Co-authored-by: Romain Manni-Bucau <rmannibucau@apache.org>
6 files changed
tree: 0171e745777abe120d2f41ef09089025a7452bf9
  1. .github/
  2. cache/
  3. config/
  4. core/
  5. crypto/
  6. event/
  7. integration-tests/
  8. lang/
  9. samples/
  10. src/
  11. support/
  12. test-coverage/
  13. tools/
  14. web/
  15. .asf.yaml
  16. .gitignore
  17. .jenkins.groovy
  18. CONTRIBUTING.md
  19. LICENSE
  20. NOTICE
  21. pom.xml
  22. README
  23. README.md
  24. RELEASE-NOTES
  25. shiro.doap.rdf
README.md

Maven Central Build Status

Apache Shiro

Apache Shiro is a powerful and easy-to-use Java security framework that performs authentication, authorization, cryptography, and session management. With Shiro’s easy-to-understand API, you can quickly and easily secure any application – from the smallest mobile applications to the largest web and enterprise applications.

Documentation and Examples

http://shiro.apache.org

Tutorials

License

Apache License, Version 2.0