Details
Major Description
though by default we just return a 401 without any message to say why the authorization failed for more security reason, in some cases like in Customer AccessTokenValidatorService they may wanna return a 401 with entity message like "token expired" which can bring back more info. We better extend AuthorizationUtils a bit to add the method which can take authorizationFailure cause and build response accordingly.