You are viewing a plain text version of this content. The canonical link for it is here.

Posted to notifications@grails.apache.org by GitBox <gi...@apache.org> on 2026/10/16 16:48:43 UTC

[GH] (grails-core/fix/16632-unauthenticated-request): Workflow run "CI" failed!

The GitHub Actions job "CI" on grails-core.git/fix/16632-unauthenticated-request has failed.
Run started by GitHub user ruthst00 (triggered by ruthst00).

Head commit for run:
b1012aaca5bcae7c046f3305eb3ce9b7e40ef8f2 / ruthes00 <ru...@gmail.com>
Implemented the fix for #16632.

### Cause and fix
The compatibility `FilterSecurityInterceptor` passed null authentication to authorization voters, causing an `AssertionError` instead of a handled authentication failure.

It now throws `AuthenticationCredentialsNotFoundException` before invoking the decision manager. This lets the configured exception-translation filter return 401 for API entry points, while preserving login redirects and public-request behavior.

### Coverage
- Reproduced the reported failure before applying the fix.
- Added tests for missing authentication, HTTP 401/200/403 responses, public requests, access denial, and committed responses.
- Updated filter-chain documentation.

Report URL: https://github.com/apache/grails-core/actions/runs/38757970239

With regards,
GitHub Actions via GitBox