[QPID-7151] [Java Broker] Improve error handling in OAuth2 AuthenticationProvider

• Type: Improvement
• Status: Closed
• Priority: Minor
• Resolution: Fixed
• Fix Version/s: qpid-java-6.1
• Component/s: Broker-J
• Assignee: Unassigned
• Reporter: Lorenz Quack
• Created: 17/Mar/16 17:10
• Updated: 14/Mar/17 21:28
• Resolved: 18/Mar/16 11:53

Description

Currently, some OAuth2 token endpoints (I'm looking at you GitHub) return status code 200 even if an error occurs. This is not caught an subsequent an exception is thrown when the access token is not found.

Our code should handle this better and not only check for the status code but also for an "error" entry in the response body.