merge: fixed merge conflicts with dev

backend/src/middleware/auth/auth.ts

@@ -6,6 +6,7 @@ import jwksClient from 'jwks-rsa';
 import * as express from 'express';
 import {AuthenticatedRequest} from './authenticated-request.js';
 import {AuthenticationInfo} from './authentication-info.js';
+import { UnauthorizedException } from '../../exceptions/unauthorized-exception.js';
 
 const JWKS_CACHE = true;
 const JWKS_RATE_LIMIT = true;
@@ -46,14 +47,14 @@ const idpConfigs = {
 const verifyJwtToken = expressjwt({
     secret: async (_: express.Request, token: jwt.Jwt | undefined) => {
         if (!token?.payload || !(token.payload as JwtPayload).iss) {
-            throw new Error('Invalid token');
+            throw new UnauthorizedException('Invalid token.');
         }
 
         const issuer = (token.payload as JwtPayload).iss;
 
         const idpConfig = Object.values(idpConfigs).find((config) => config.issuer === issuer);
         if (!idpConfig) {
-            throw new Error('Issuer not accepted.');
+            throw new UnauthorizedException('Issuer not accepted.');
         }
 
         const signingKey = await idpConfig.jwksClient.getSigningKey(token.header.kid);