verify_authorized plug doesn't work properly on Phoenix 1.3
schrockwell opened this issue · comments
When using the verify_authorized plug in Phoenix 1.3 with Bodyguard 1.x, if any error is thrown in a controller action, the 403 error is raised and the error page does not show.
This is due to the way controller actions were refactored in Phoenix 1.3 to support fallback controllers. See https://github.com/phoenixframework/phoenix/blob/v1.3.0-rc.2/lib/phoenix/controller/pipeline.ex#L86
Need to investigate if this is an easy fix. If not, Bodyguard 2.x is recommended for Phoenix 1.3+ anyway.