Returning custom error messages on auth handlers about encore HOT 8 CLOSED

Also wanted to let you know your solution works flawlessly, thanks again!

from encore.

Thank you @wisdommat, please do! Let me know if you want some help or guidance. Really appreciate the help!

from encore.

Hi @Minivera! If you use errs.Error with code errs.Unauthenticated the error message will be propagated:

//encore:authhandler
func AuthHandler(ctx context.Context, token string) (auth.UID, error) {
	return "", errs.B().Code(errs.Unauthenticated).Msg("ask me again tomorrow").Err()
}

Followed by:

# The auth handler's error message is propagated to the user when a token is provided:
$ curl http://localhost:4060/my.Endpoint -H "Authorization: Token foo"
{
  "code": "unauthenticated",
  "message": "ask me again tomorrow",
  "details": null
}

# If no token is given this error is provided directly by Encore and cannot be overridden
$ curl http://localhost:4060/my.Endpoint
{
  "code": "unauthenticated",
  "message": "missing auth token",
  "details": null
}

Maybe I'm misunderstanding what you mean, or does that satisfy your needs?

from encore.

Oh! Let me try that. I tried by returning a standard error and it triggered a 500, I assumed this part from the docs meant that this was the intended behavior:

If your auth handler returns an error, Encore responds with a 500 Internal Server Error. To signify that the token is not valid, return the empty string ("") as the auth.UID. Encore will then respond with `401 Unauthorized.

My apologies for the misunderstanding.

from encore.

That's a great point, the docs should be improved! Will do that, thank you!

from encore.

@eandre I will like to work on adding this to the documentation

from encore.

Apologies for closing the issue randomly, miss-click.

from encore.

@eandre i just made a pull request to add this to the docs

from encore.