Don't send body with 403

In most cases the client is not a browser. Fixes quarkusio#5998
stuartwdouglas · Jul 8, 2020 · 59265e1 · 59265e1
1 parent ee33c04
commit 59265e1
Show file tree

Hide file tree

Showing 2 changed files with 2 additions and 5 deletions.
diff --git a/.../resteasy/runtime/src/main/java/io/quarkus/resteasy/runtime/ForbiddenExceptionMapper.java b/.../resteasy/runtime/src/main/java/io/quarkus/resteasy/runtime/ForbiddenExceptionMapper.java
@@ -14,8 +14,9 @@
 @Provider
 @Priority(Priorities.USER + 1)
 public class ForbiddenExceptionMapper implements ExceptionMapper<ForbiddenException> {
+
     @Override
     public Response toResponse(ForbiddenException exception) {
-        return Response.status(403).entity("Forbidden").build();
+        return Response.status(403).build();
     }
 }
diff --git a/...sions/smallrye-jwt/deployment/src/test/java/io/quarkus/jwt/test/RolesAllowedUnitTest.java b/...sions/smallrye-jwt/deployment/src/test/java/io/quarkus/jwt/test/RolesAllowedUnitTest.java
@@ -170,8 +170,6 @@ public void callEcho2() {
                 .get("/endp/echo2").andReturn();
 
         Assertions.assertEquals(HttpURLConnection.HTTP_FORBIDDEN, response.getStatusCode());
-        String replyString = response.body().asString();
-        Assertions.assertEquals("Forbidden", replyString);
     }
 
     /**
@@ -245,8 +243,6 @@ public void echoWithToken2() throws Exception {
                 .get("/endp/echo").andReturn();
 
         Assertions.assertEquals(HttpURLConnection.HTTP_FORBIDDEN, response.getStatusCode());
-        String replyString = response.body().asString();
-        Assertions.assertEquals("Forbidden", replyString);
     }
 
     /**