[MESOS-5637] Authorized endpoint results are inconsistent for failures.

• Type: Bug
• Status: Resolved
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 1.0.0
• Fix Version/s: 1.0.0
• Component/s: agent, master, modules
• Labels: authorization mesosphere security
• Sprint: Mesosphere Sprint 37
• Assignee: Till Toenshoff
• Reporter: Till Toenshoff
• Shepherd: Alex R
• Created: 18/Jun/16 00:16
• Updated: 29/Apr/19 09:26
• Resolved: 20/Jun/16 17:47

Description

When trying to access authorized endpoints, the resulting HTTP status codes are not consistent for internal authorizer failures (failed future returned by authorized).

/flags:

HTTP/1.1 503 Service Unavailable
Date: Fri, 17 Jun 2016 23:11:04 GMT
Content-Length: 0

/state:

HTTP/1.1 500 Internal Server Error
Date: Fri, 17 Jun 2016 23:08:49 GMT
Content-Type: text/plain; charset=utf-8
Content-Length: size($FUTURE_ERROR_MESSAGE)

$FUTURE_ERROR_MESSAGE