try {
saveRequest(request, session);
} catch (IOException ioe) {
WebLogger.WEB_SECURITY_LOGGER.tracef("Request body too big to save during authentication");
try {
response.sendError(HttpServletResponse.SC_FORBIDDEN, sm.getString("authenticator.requestBodyTooBig"));
} catch (IOException e) {
// Ignore IOException here (client disconnect)
throw new AuthException(e.getLocalizedMessage());
}
return (AuthStatus.FAILURE);