onForbidden

context(principalContext: PrincipalContext<P>, authenticatedContext: C, rolesContext: RolesContext<P, R>)
abstract suspend fun RoutingContext.onForbidden()(source)

Invoked when authentication succeeds, but the principal lacks any roles required by the route.

The default handler responds with HttpStatusCode.Forbidden.