fix: Proper 401 response for invalid tokens

Signed-off-by: Julius Knorr <jus@bitgrid.net>
nextcloud · Nov 29, 2024 · d96be3d · d96be3d
1 parent 471b021
commit d96be3d
Showing 1 changed file with 6 additions and 1 deletion.
diff --git a/lib/Middleware/WOPIMiddleware.php b/lib/Middleware/WOPIMiddleware.php
@@ -19,6 +19,7 @@
 use OCP\AppFramework\Http\JSONResponse;
 use OCP\AppFramework\Http\Response;
 use OCP\AppFramework\Middleware;
+use OCP\Files\NotFoundException;
 use OCP\Files\NotPermittedException;
 use OCP\IConfig;
 use OCP\IRequest;
@@ -78,7 +79,11 @@ public function beforeController($controller, $methodName) {
 
 	public function afterException($controller, $methodName, \Exception $exception): Response {
 		if ($exception instanceof NotPermittedException && $controller instanceof WopiController) {
-			return new JSONResponse([], Http::STATUS_FORBIDDEN);
+			return new JSONResponse([], Http::STATUS_UNAUTHORIZED);
+		}
+
+		if ($exception instanceof NotFoundException && $controller instanceof WopiController) {
+			return new JSONResponse([], Http::STATUS_NOT_FOUND);
 		}
 
 		if ($controller instanceof WopiController) {