Creates the denial rejection and brands it with its HTTP status hint.
Why the ability was denied
The policy name
The ability name
ReadonlyabilityThe ability that was denied.
OptionalcauseReadonlyfailureWhy the ability was denied.
ReadonlynameStable discriminant for consumers that cannot use instanceof across realms.
ReadonlypolicyThe policy that was evaluated.
OptionalstackStaticstackThe Error.stackTraceLimit property specifies the number of stack frames
collected by a stack trace (whether generated by new Error().stack or
Error.captureStackTrace(obj)).
The default value is 10 but may be set to any valid JavaScript number. Changes
will affect any stack trace captured after the value has been changed.
If set to a non-number value, or set to a negative number, stack traces will not capture any frames.
StaticcaptureCreates a .stack property on targetObject, which when accessed returns
a string representing the location in the code at which
Error.captureStackTrace() was called.
const myObject = {};
Error.captureStackTrace(myObject);
myObject.stack; // Similar to `new Error().stack`
The first line of the trace will be prefixed with
${myObject.name}: ${myObject.message}.
The optional constructorOpt argument accepts a function. If given, all frames
above constructorOpt, including constructorOpt, will be omitted from the
generated stack trace.
The constructorOpt argument is useful for hiding implementation
details of error generation from the user. For instance:
function a() {
b();
}
function b() {
c();
}
function c() {
// Create an error without stack trace to avoid calculating the stack trace twice.
const { stackTraceLimit } = Error;
Error.stackTraceLimit = 0;
const error = new Error();
Error.stackTraceLimit = stackTraceLimit;
// Capture the stack trace above function b
Error.captureStackTrace(error, b); // Neither function c, nor b is included in the stack trace
throw error;
}
a();
OptionalconstructorOpt: FunctionStaticprepare
Rejection of
IAuthorizationPolicyService.authorizewhen the ability is denied.It carries an HTTP status hint —
401forPolicyDenialauthentication-required,403otherwise — whose title and detail are the ones the authorization guards write, so an application'serrorHandleranswers a thrown refusal with the SAME body a guard's refusal gets. WithouterrorHandlerthe kernel's fallback answers a masked500, as it does for every other hinted error. The message names the policy and the ability; it is logged, never served.Example
Since
0.9.0