Reactive Routes - failure handler can't intercept exception thrown for invalid JWT

[michalvavrik]

Describe the bug

When application with reactive-routes and smallrye-jwt receives invalid token, there is no way to customize response. The issue is valid when proactive security is disabled or enabled.

Expected behavior

My failure handler dealing with AuthenticationFailedException is invoked when JWT token is invalid.

Actual behavior

Exception is caught (event is not failed), default authentication handler is invoked directly, the handler sends a challenge and ends event (iff some auth mechanism didn't end it itself).

How to Reproduce?

Reproducer:

Steps to reproduce the behavior:

1. git clone https://github.com/michalvavrik/quarkus-reproducer.git
2. git checkout reactive-routes
3. mvn quarkus:dev
4. curl -v "http://localhost:8080/hello" -vvv -H "Authorization: Bearer asdgasdg"
5. response body is empty

Output of uname -a or ver

No response

Output of java -version

No response

GraalVM version (if different from Java)

No response

Quarkus version or git rev

No response

Build tool (ie. output of mvnw --version or gradlew --version)

No response

Additional information

We discussed multiple solutions here #28391, in PR history can also be found multiple variants of fixes, but it was suggested that it's handled in dedicated issue.

[quarkus-bot]

/cc @sberyozkin