snapshot of https://github.com/ory/kratos.git (master, 2026-09-15; blobs > 131072B omitted)

selfservice/strategy/oidc/error.go

@@ -0,0 +1,40 @@
+// Copyright © 2023 Ory Corp
+// SPDX-License-Identifier: Apache-2.0
+
+package oidc
+
+import (
+	"io"
+	"net/http"
+
+	"github.com/pkg/errors"
+
+	"github.com/ory/herodot"
+	"github.com/ory/x/logrusx"
+)
+
+func ErrScopeMissing() *herodot.DefaultError {
+	return herodot.ErrBadRequest().
+		WithError("authentication failed because a required scope was not granted").
+		WithReasonf(`Unable to finish because one or more permissions were not granted. Please retry and accept all permissions.`)
+}
+
+func ErrIDTokenMissing() *herodot.DefaultError {
+	return herodot.ErrBadRequest().
+		WithError("authentication failed because id_token is missing").
+		WithReasonf(`Authentication failed because no id_token was returned. Please accept the "openid" permission and try again.`)
+}
+
+func logUpstreamError(l *logrusx.Logger, resp *http.Response) error {
+	if resp.StatusCode == http.StatusOK {
+		return nil
+	}
+
+	body, err := io.ReadAll(io.LimitReader(resp.Body, 1024))
+	if err != nil {
+		l = l.WithError(err)
+	}
+
+	l.WithField("response_code", resp.StatusCode).WithField("response_body", string(body)).Error("The upstream OIDC provider returned a non 200 status code.")
+	return errors.WithStack(herodot.ErrUpstreamError().WithReasonf("OpenID Connect provider returned a %d status code but 200 is expected.", resp.StatusCode))
+}