feat: log invalid credentials on info level instead of error/warning (#…

…517)

Closes #505

api/decision.go

@@ -110,7 +110,7 @@ func (h *DecisionHandler) decisions(w http.ResponseWriter, r *http.Request) {
 		h.r.Logger().WithError(err).
 			WithFields(fields).
 			WithField("granted", false).
-			Warn("Access request denied")
+			Info("Access request denied")
 
 		h.r.ProxyRequestHandler().HandleError(w, r, rl, err)
 		return

proxy/request_handler.go

@@ -223,6 +223,9 @@ func (d *RequestHandler) HandleRequest(r *http.Request, rl *rule.Rule) (session
 			// The authentication handler says that no further authentication/authorization is required, and the request should
 			// be forwarded to its final destination.
 			// return nil
+			case helper.ErrUnauthorized.ErrorField:
+				d.r.Logger().Info(err)
+				return nil, err
 			default:
 				d.r.Logger().WithError(err).
 					WithFields(fields).