c60cc7ca75
Some checks failed
CI / Run tests and lints (push) Failing after 29s
CI / Build CLI docs (push) Has been skipped
CI / Run Playwright end-to-end tests (mysql) (push) Failing after 3s
CI / Run Playwright end-to-end tests (postgres) (push) Failing after 2s
CI / Run Playwright end-to-end tests (sqlite) (push) Failing after 3s
CodeQL / Analyze (go) (push) Failing after 4s
CodeQL / Analyze (javascript) (push) Failing after 3s
Docker Image Scanners / scanners (push) Failing after 4s
Synchronize Issue Labels / Synchronize Issue Labels (push) Has been skipped
CI / Run end-to-end tests (postgres) (push) Failing after 19s
CI / Run end-to-end tests (sqlite) (push) Failing after 2s
CI / Run Playwright end-to-end tests (cockroach) (push) Failing after 2s
CI / Draft newsletter (push) Has been skipped
CI / Generate release (push) Has been skipped
CI / Pending approval Slack notification (push) Has been skipped
CI / Send newsletter (push) Has been skipped
41 lines
1.3 KiB
Go
41 lines
1.3 KiB
Go
// Copyright © 2023 Ory Corp
|
|
// SPDX-License-Identifier: Apache-2.0
|
|
|
|
package oidc
|
|
|
|
import (
|
|
"io"
|
|
"net/http"
|
|
|
|
"github.com/pkg/errors"
|
|
|
|
"github.com/ory/herodot"
|
|
"github.com/ory/x/logrusx"
|
|
)
|
|
|
|
func ErrScopeMissing() *herodot.DefaultError {
|
|
return herodot.ErrBadRequest().
|
|
WithError("authentication failed because a required scope was not granted").
|
|
WithReasonf(`Unable to finish because one or more permissions were not granted. Please retry and accept all permissions.`)
|
|
}
|
|
|
|
func ErrIDTokenMissing() *herodot.DefaultError {
|
|
return herodot.ErrBadRequest().
|
|
WithError("authentication failed because id_token is missing").
|
|
WithReasonf(`Authentication failed because no id_token was returned. Please accept the "openid" permission and try again.`)
|
|
}
|
|
|
|
func logUpstreamError(l *logrusx.Logger, resp *http.Response) error {
|
|
if resp.StatusCode == http.StatusOK {
|
|
return nil
|
|
}
|
|
|
|
body, err := io.ReadAll(io.LimitReader(resp.Body, 1024))
|
|
if err != nil {
|
|
l = l.WithError(err)
|
|
}
|
|
|
|
l.WithField("response_code", resp.StatusCode).WithField("response_body", string(body)).Error("The upstream OIDC provider returned a non 200 status code.")
|
|
return errors.WithStack(herodot.ErrUpstreamError().WithReasonf("OpenID Connect provider returned a %d status code but 200 is expected.", resp.StatusCode))
|
|
}
|