mirror of
https://github.com/andwati/zitadel.git
synced 2026-10-18 13:52:51 +00:00
fbd43ced6e
Fixes #11730 The v1 gRPC middleware can return native gRPC status errors such as `codes.Unauthenticated` when the auth header is missing. Those errors were being passed through the generic gRPC error converter, which only handled ZITADEL errors and downgraded raw gRPC statuses to `codes.Unknown`. Through grpc-gateway that caused `/auth/v1/users/me` to return HTTP 500 instead of HTTP 401. So this change preserves native gRPC status errors in `ZITADELToGRPCError`, keeps `ExtractZITADELError` aligned with those transport codes for activity reporting, and adds regression coverage for the converter, middleware, and gateway HTTP behavior. --------- Co-authored-by: Gayathri Vijayan <[email protected]>
25 lines
741 B
Go
25 lines
741 B
Go
package server
|
|
|
|
import (
|
|
"context"
|
|
"net/http"
|
|
"net/http/httptest"
|
|
"testing"
|
|
|
|
"github.com/grpc-ecosystem/grpc-gateway/v2/runtime"
|
|
"github.com/stretchr/testify/assert"
|
|
"google.golang.org/grpc/codes"
|
|
"google.golang.org/grpc/status"
|
|
)
|
|
|
|
func TestErrorHandler_PreservesUnauthenticatedStatus(t *testing.T) {
|
|
req := httptest.NewRequest(http.MethodGet, "/auth/v1/users/me", nil)
|
|
resp := httptest.NewRecorder()
|
|
|
|
errorHandler(context.Background(), runtime.NewServeMux(), jsonMarshaler, resp, req, status.Error(codes.Unauthenticated, "auth header missing"))
|
|
|
|
assert.Equal(t, http.StatusUnauthorized, resp.Code)
|
|
assert.Contains(t, resp.Body.String(), `"code":16`)
|
|
assert.Contains(t, resp.Body.String(), `"message":"auth header missing"`)
|
|
}
|