Details

    • Manual

    Description

      By forums:

       

      If Liferay allows access based on Authorization header, I get back correctly the StructuredContent. However if I don't pass in a Authorization header at all, Liferay does not allow access and the following is returned with response code 200 OK:

      {
      "data":

      { "structuredContent": null }

      ,
      "errors": [

      { "extensions": null, "message": "Exception while fetching data (/structuredContent) : java.lang.SecurityException: Access denied to com.liferay.journal.service.JournalArticleService#getLatestArticle", "path": null }

      ]
      }

      I am rather new to GraphQL with auth and in the frontend app I want to choose to send the user to a login or display something useful if user is not authorized. Are there no error codes in the response ?

      Attachments

        Activity

          People

            pablo.agulla Pablo Agulla
            javier.gamarra Javier Gamarra (Inactive)
            Javier Gamarra Javier Gamarra (Inactive)
            Kiyoshi Lee Kiyoshi Lee
            Votes:
            0 Vote for this issue
            Watchers:
            0 Start watching this issue

            Dates

              Created:
              Updated:
              Resolved:

              Packages

                Version Package
                7.1.X
                7.2.10 DXP FP17
                7.2.10.6 DXP SP6
                7.2.X
                7.3.0 CE GA1
                Master