Files
vikunja/pkg/web/handler/error.go
kolaente 2fc6f033f2 refactor(handler): return domain error for forbidden instead of echo.HTTPError
Keeps the Do* helpers framework-neutral so non-Echo callers (upcoming
Huma /v2 handlers) don't need a translation shim.

Addresses review feedback on #2670.
2026-04-21 09:23:13 +00:00

56 lines
1.9 KiB
Go

// Vikunja is a to-do list application to facilitate your life.
// Copyright 2018-present Vikunja and contributors. All rights reserved.
//
// This program is free software: you can redistribute it and/or modify
// it under the terms of the GNU Affero General Public License as published by
// the Free Software Foundation, either version 3 of the License, or
// (at your option) any later version.
//
// This program is distributed in the hope that it will be useful,
// but WITHOUT ANY WARRANTY; without even the implied warranty of
// MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
// GNU Affero General Public License for more details.
//
// You should have received a copy of the GNU Affero General Public License
// along with this program. If not, see <https://www.gnu.org/licenses/>.
package handler
import (
"net/http"
"code.vikunja.io/api/pkg/web"
)
// ErrGenericForbidden indicates the authenticated caller lacks permission
// to perform the requested operation. It is framework-neutral: it implements
// web.HTTPErrorProcessor so any HTTP framework (Echo today, Huma in the
// upcoming /v2 migration) can translate it to the correct response via the
// central error handler.
//
// An optional Message overrides the default "Forbidden" text; this preserves
// the legacy per-site wording on sites like DoReadOne.
type ErrGenericForbidden struct {
// Message overrides the default "Forbidden" text when non-empty.
Message string
}
// Error implements the error interface.
func (e ErrGenericForbidden) Error() string {
if e.Message != "" {
return e.Message
}
return "Forbidden"
}
// HTTPError implements web.HTTPErrorProcessor so the central error handler
// can translate the error to an HTTP 403 response regardless of which
// framework surfaces it.
func (e ErrGenericForbidden) HTTPError() web.HTTPError {
msg := e.Message
if msg == "" {
msg = "Forbidden"
}
return web.HTTPError{HTTPCode: http.StatusForbidden, Message: msg}
}