shuffle authz endpoint

openid-connect-server/src/main/java/org/mitre/uma/web/AuthorizationRequestEndpoint.java

@@ -144,11 +144,14 @@ public class AuthorizationRequestEndpoint {
 						m.addAttribute(JsonErrorView.ERROR, "not_authorized");
 						m.addAttribute(JsonErrorView.ERROR_MESSAGE, "This resource set can not be accessed.");
 						m.addAttribute(HttpCodeView.CODE, HttpStatus.FORBIDDEN);
-					}
+						return JsonErrorView.VIEWNAME;
+					} else {
+						// claims weren't empty or missing, we need to check against what we have
 						
 						Collection<Claim> claimsUnmatched = claimsProcessingService.claimsAreSatisfied(rs.getClaimsRequired(), ticket.getClaimsSupplied());
 						
 						if (claimsUnmatched.isEmpty()) {
+							// if the unmatched claims come back empty, by function contract that means we're happy and can issue a token
 							
 							// TODO: move this whole mess to the OIDCTokenService (#797)
 							
@@ -226,6 +229,7 @@ public class AuthorizationRequestEndpoint {
 						}						
 						
 						
+					}
 				} else {
 					// ticket wasn't found, return an error
 					m.addAttribute(HttpStatus.BAD_REQUEST);