apolloconfig/apollo · error · AccessDeniedException

Unsupported auth type

Error message

Unsupported auth type

What it means

Thrown by requireUserManagementMutationPermission when the identity context's auth type is none of USER, USER_TOKEN, or CONSUMER.

Source

Thrown at apollo-portal/src/main/java/com/ctrip/framework/apollo/openapi/v1/controller/UserController.java:175

  private boolean requireUserManagementMutationPermission(String operator) {
    if (UserIdentityConstants.USER.equals(UserIdentityContextHolder.getAuthType())) {
      return false;
    }
    if (UserIdentityConstants.USER_TOKEN.equals(UserIdentityContextHolder.getAuthType())) {
      if (!unifiedPermissionValidator.hasManageUsersPermission()) {
        throw new AccessDeniedException("Manage users permission is required");
      }
      return false;
    }
    if (UserIdentityConstants.CONSUMER.equals(UserIdentityContextHolder.getAuthType())) {
      if (!unifiedPermissionValidator.hasManageUsersPermission()) {
        throw new AccessDeniedException("Manage users permission is required");
      }
      operatorResolver.resolve(operator);
      return true;
    }
    throw new AccessDeniedException("Unsupported auth type");
  }

  private boolean isPortalUserIdentity() {
    return UserIdentityConstants.USER.equals(UserIdentityContextHolder.getAuthType())
        || UserIdentityConstants.USER_TOKEN.equals(UserIdentityContextHolder.getAuthType());
  }
}

View on GitHub (pinned to d95fc18d11)

Solutions

1. Authenticate as a portal user, user token, or consumer token; no other auth types are supported for user management endpoints.
2. Verify the auth filters run and set a supported auth type before reaching this controller.

When it happens

Trigger: Thrown when the operator principal resolved for a user-management call is of an unsupported authentication type.

Common situations: Custom auth SPI returns an unexpected Principal type for these endpoints.

AI-assisted analysis of apolloconfig/apollo@d95fc18d11 (2026-08-14). Data as JSON: /api/errors/c0fca0e54239269d. Report an issue: GitHub.