diff --git a/samples/webflux-security/src/main/java/io/spring/sample/graphql/SecurityDataFetcherExceptionResolver.java b/samples/webflux-security/src/main/java/io/spring/sample/graphql/SecurityDataFetcherExceptionResolver.java
index 28d2f7b1..e9ad6115 100644
--- a/samples/webflux-security/src/main/java/io/spring/sample/graphql/SecurityDataFetcherExceptionResolver.java
+++ b/samples/webflux-security/src/main/java/io/spring/sample/graphql/SecurityDataFetcherExceptionResolver.java
@@ -28,7 +28,7 @@ public class SecurityDataFetcherExceptionResolver implements DataFetcherExceptio
 	@Override
 	public Mono<List<GraphQLError>> resolveException(Throwable exception, DataFetchingEnvironment environment) {
 		if (exception instanceof AuthenticationException) {
-			// TOTO: should this be empty ?
+			return unauthorized(environment);
 		}
 		if (exception instanceof AccessDeniedException) {
 			return ReactiveSecurityContextHolder.getContext()