SEC-2053: Spring Security does not allow configuring system exception that can occur during authentication

[spring-projects-issues]

joseph antony aruja (Migrated from SEC-2053) said:

When implementing Custom Handlers for authentication failures, the application developer have to write extra code to handle various system exceptions that can occur during authentication.

Custom AuthenticationFailureHandlerImpl is attached. If this can be moved as a a part of annotation or configuration, it will really improve the framework

[spring-projects-issues]

joseph antony aruja said:

The attached class is the one I implemented When I have to handle System exception during Authentication.

Any ideas / suggestion ?..

In the core framework exceptions can be handled in a more elegant way with writing code. So it would be better to incorporate a way to manage the exception than can occur during authentication

[spring-projects-issues]

Rob Winch said:

ExceptionMappingAuthenticationFailureHandler should cover this use case already. If you disagree, can you please elaborate?

[spring-projects-issues]

joseph antony aruja said:

Thanks Rob. Not recently explored all the new classes. Looks like it can cover most of the exception mapping. Need to do some testing before I can comment further..

[spring-projects-issues]

Rob Winch said:

Resolving per the suggestion above