Symfony 4 BadCredentialsException return 500

Question

when I try : throw new BadCredentialsException('invalid token')

I obtain in prod or dev a 500 error page, not a 401/403

How I can do that ?

In my AuthTokenAuthenticator class as service to catch header with x-token

Answer 1

You should throw an exception that implements HttpExceptionInterface .

For example

throw new \Symfony\Component\HttpKernel\Exception\AccessDeniedHttpException();