Nexus API Reference

Forbidden extends AuthException
in package

FinalYes
Tags
psalm-api

Principal present but lacks required scope / role / policy. Mapped to 403 by AuthorizationMiddleware. missing lists the constraints that failed — empty array means "Authorize policy returned false" (opaque).

missing is included in the 403 JSON body for client debugging. It NEVER contains the Principal's actual claims — that's information disclosure.

Table of Contents

Properties

$missing  : array<string|int, mixed>

Methods

__construct()  : mixed

Properties

$missing read-only

public array<string|int, mixed> $missing = []

Methods

__construct()

public __construct([array<int, string> $missing = [] ][, string $message = 'Forbidden' ]) : mixed
Parameters
$missing : array<int, string> = []
$message : string = 'Forbidden'

        
On this page

Search results