Why doesn't my Custom error message work in IClaimsAuthoriser?

[sa-es-ir]

Hi, I want to use custom error when http status code was Forbidden(403), so for reach this I try this:

public class CustomClaimsAuthoriser : IClaimsAuthoriser
{
    public Response<bool> Authorise(
        ClaimsPrincipal claimsPrincipal,
        Dictionary<string, string> routeClaimsRequirement,
        List<PlaceholderNameAndValue> urlPathPlaceholderNameAndValues)
    {
        // some code
        return new ErrorResponse<bool>(new UserDoesNotHaveClaimError("User does not have required claims"));
    }
}

But response has no content and just return status code 403.
My code is wrong or what's the problem?

Specifications

• Ocelot Version: 16.0.1
• Asp.net core 3.1

[ks1990cn]

What content you expect when Unauthorised?

[sa-es-ir]

@ks1990cn Pretty old issue and I don't remember how I handled that.
Because of better user experience on API response, I wanted to send a message along with a 403 status code.

[raman-m]

IClaimsAuthoriser

We don't have this interface in Ocelot code base: Search for IClaimsAuthoriser
There is no such IClaimsAuthoriser interface in ASP.NET repository too: Search for IClaimsAuthoriser in ASP.NET Core

Cannot get it... Is it your custom interface? Are you kidding?

[raman-m]

@sa-es-ir commented Jan 15, 2021

Hi Saeed!
Please, upload your solution to your GitHub repo to demonstrate the bug... It is hard to guess and recommend something, if there's no real code to review.
You can fork the Ocelot repo and create feature branch with solution, or it could be separate repo where you make reference to Ocelot NuGet package.
Thanks!

Also, could you check these links to get an inspiration:

• Stack Overflow: Ocelot RouteClaimsRequirement does not recognize my claims and returns 403 Forbidden