docs: document security annotations required for custom error views#5381
Open
docs: document security annotations required for custom error views#5381
Conversation
Custom error handler views like RouteNotFoundError subclasses need security annotations (e.g., @AnonymousAllowed) when using VaadinSecurityConfigurer, which denies all unannotated views by default. Without this, users see a generic error page instead of their custom not-found page. Adds cross-references between the routing exceptions, protect views, security configurer, and enabling security pages so users can discover this requirement from any entry point. Fixes #5378
Preview DeploymentThis PR has been deployed for preview. URL: https://docs-preview-pr-5381.fly.dev Built from 04a3d31 |
Contributor
|
Adding the security annotation is not enough to make the error view work. By default, both Spring Security and Vaadin have a deny-all policy for all request paths that are not Vaadin routes or are explicitly configured with a request matcher. |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Custom error handler views like RouteNotFoundError subclasses need security annotations (e.g., @AnonymousAllowed) when using VaadinSecurityConfigurer, which denies all unannotated views by default. Without this, users see a generic error page instead of their custom not-found page.
Adds cross-references between the routing exceptions, protect views, security configurer, and enabling security pages so users can discover this requirement from any entry point.
Fixes #5378