[Authentication] Return details when user token authentication fails

Authentication/Business/JWT/TokenValidationHandler.cs

@@ -52,7 +52,7 @@ namespace iiie.Authentication.Business.JWT
         /// <returns>The HTTP response</returns>
         protected override Task<HttpResponseMessage> SendAsync(HttpRequestMessage request, CancellationToken cancellationToken)
         {
-            HttpStatusCode statusCode;
+            OpResult<bool> error = null;
             string token;
 
             if (!TryRetrieveToken(request, out token))
@@ -70,17 +70,15 @@ namespace iiie.Authentication.Business.JWT
 
                 if (name == null || salt == null)
                 {
-                    OpResult<bool>.Error(ResultStatus.LoginError, string.Format("Incomplete token; username is present: {0}; salt is present {1}", name != null, salt != null)).Log();
-                    statusCode = HttpStatusCode.Unauthorized;
+                    error = OpResult<bool>.Error(ResultStatus.LoginError, string.Format("Incomplete token; username is present: {0}; salt is present {1}", name != null, salt != null), "Incomplete token").Log();
                 }
                 else
                 {
                     var user = GetUserDbo(name.Value, salt.Value);
                     if (user == null)
                     {
-                        OpResult<bool>.Error(ResultStatus.LoginError,
-                            string.Format("Username {0} not found", name.Value)).Log();
-                        statusCode = HttpStatusCode.Unauthorized;
+                        error = OpResult<bool>.Error(ResultStatus.LoginError,
+                            string.Format("Username {0} not found", name.Value), "").Log();
                     }
                     else
                     {
@@ -91,11 +89,10 @@ namespace iiie.Authentication.Business.JWT
             }
             catch (Exception e)
             {
-                OpResult<bool>.Error(ResultStatus.LoginError, e).Log();
-                statusCode = HttpStatusCode.Unauthorized;
+                error = OpResult<bool>.Error(ResultStatus.LoginError, e, "Failed to validate token").Log();
             }
-            return Task<HttpResponseMessage>.Factory.StartNew(() =>
-               new HttpResponseMessage(statusCode), cancellationToken);
+            var resp = request.CreateErrorResponse(HttpStatusCode.Unauthorized, error.PublicDetails);
+            return Task<HttpResponseMessage>.Factory.StartNew(() => resp, cancellationToken);
         }
     }
 }