Shouldn't an authentication failure return status 401 as well?

[Kovalov Maxim]

[Antonio Aloisio]

why this has been closed? is it still valid?

[Antonio Aloisio]

ok I guess this has been cloased because the callback you pass to the authorization method gets an error when there is an auth failure. In this case you can throw 401

[Kovalov Maxim]

@gnuton sorry, don't remember exactly why I closed it. I fixed it for my self and made a pull request:

#13

[Kovalov Maxim]

But it was ignored for more than 5 years ...