Wrong http code returned when getting all vnf packages with malformed authorization token

[YaoYudie]

according to SOL013 v2.6.1 (clause 6.4 Common error situations), the API should return:
400 Bad Request: If the request contains a malformed access token, the API producer should respond with this response.
However, the API returns with http code 401

operation log:
root@ubuntu:~# curl -i -X GET http://172.22.39.3:9890/vnfpkgm/v1/vnf_packages -H "Content-type: application/json" -H "Authorization:Bearer QWxhZGRpbjpvcGVuIHNlc2FtZQ=="
HTTP/1.1 401 Unauthorized
Content-Type: application/json
Content-Length: 114
Www-Authenticate: Keystone uri="http://172.22.39.3/identity"
X-Openstack-Request-Id: req-99c71b24-aef8-46ce-9965-8ef8f3296b3d
Date: Fri, 12 Feb 2021 07:44:39 GMT

{"error": {"code": 401, "title": "Unauthorized", "message": "The request you have made requires authentication."}}root@ubuntu:~#
root@ubuntu:~#

[Yasufumi Ogawa (yasufum)]

Any update?

[Hiromu Asahina (h-asahina)]

I think this is not a Tacker issue, but a keystonemiddlware issue.
The error you mentioned is raised from the process_request method of keystonemiddlware.

https://github.com/openstack/keystonemiddleware/blob/90df936708aee36d77cead548d04cb7db2327f47/keystonemiddleware/auth_token/__init__.py#L680-L686

So, it's difficult to fix it unless changing the authentication flow of Tacker.