Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Return OIDC code flow error_code and error_description directly to the user if no error handler is available #41890

Closed
sberyozkin opened this issue Jul 15, 2024 · 1 comment · Fixed by #42917
Labels
area/oidc kind/enhancement New feature or request
Milestone

Comments

@sberyozkin
Copy link
Member

Description

If the OIDC code flow fails, then a user can point to to an error handler endpoint with quarkus.oidc.authentication.error-path. Error handler can provide a nicely formatted page, and suggest a user to retry by following some link, etc.

If the error handler is not available, 401 is returned. But it would be better return the error code and description directly to the user as a simple text message. Users can see them in the browser URL but it is not easy

Implementation ideas

Return a text message including the error code and description if no error handler is available

@sberyozkin sberyozkin added the kind/enhancement New feature or request label Jul 15, 2024
Copy link

quarkus-bot bot commented Jul 15, 2024

/cc @pedroigor (oidc)

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
area/oidc kind/enhancement New feature or request
Projects
None yet
Development

Successfully merging a pull request may close this issue.

1 participant