RESTEasy Reactive - provide way to customize response when JWT is invalid and proactive security enabled

[michalvavrik]

Describe the bug

When application with resteasy-reactive and smallrye-jwt receives invalid token and proactive security is enabled, there is no way to customize response.

Expected behavior

There is a way to catch AuthenticationFailedException and customize response.

Actual behavior

Exception mapper/failure handler is not called.

How to Reproduce?

Reproducer:

Steps to reproduce the behavior:

1. git clone https://github.com/michalvavrik/quarkus-reproducer.git
2. git checkout resteasy-reactive
3. mvn quarkus:dev
4. curl -v "http://localhost:8080/hello" -vvv -H "Authorization: Bearer asdgasdg"
5. response body is empty

Output of uname -a or ver

No response

Output of java -version

No response

GraalVM version (if different from Java)

No response

Quarkus version or git rev

No response

Build tool (ie. output of mvnw --version or gradlew --version)

No response

Additional information

We discussed multiple solutions here #28391, in PR history can also be found multiple variants of fixes, but it was suggested that it's handled in dedicated issue.

You can consider it duplicate of #5751, but IMHO #28391 showed the issue is sensitive and should be handled in small parts. #26922 differs in proactive=false and there is also issue when ending of response in RR that I'm going to handled.

[quarkus-bot]

/cc @FroMage, @geoand, @sberyozkin, @stuartwdouglas