Re: [aerogear-dev] [aerogear-controller] Handling SecurityProvider Exceptions/Events

Great gist my friend! I was wondering about another alternative more simple. Currently AeroGear security implements HttpStatusAwareException (I'll rename to HttpStatusAware and qmx is responsible for the hipster name) public class AeroGearSecurityMeh implements HttpStatusAware { @Override public int getStatus() { //something here } @Override public String getMessage() { //something here } } Then in AeroGearSecurityProvider we could change the method return and do something like this: public class AeroGearSecurityProvider implements SecurityProvider { @Inject private AeroGearPrincipal principal; @Override public AeroGearSecurityMeh isRouteAllowed(Route route) throws ServletException { if (!principal.hasRoles(route.getRoles())) { return new AeroGearSecurityMeh(1, "Geez, authentication has failed"); } } } Wdyt? Makes sense? -- "The measure of a man is what he does with power" - Plato - @abstractj - Volenti Nihil Difficile On Thursday, November 1, 2012 at 6:14 AM, Daniel Bevenius wrote: