Migrations/bookorbit
1
0
Fork 0
mirror of https://github.com/bookorbit/bookorbit.git synced 2026-11-03 00:11:37 -06:00
Code Issues Packages Projects Releases Wiki Activity

fix(auth): explain untrusted OIDC certificate failures

Browse Source 
Classify private trust-chain failures with a stable error code and direct administrators to a mounted CA bundle without weakening TLS verification.

Fixes #1346
This commit is contained in:
neon
2026-09-10 11:47:56 +00:00
parent e514be151a
commit 33c7260f18
9 changed files with 118 additions and 6 deletions
Download Patch File Download Diff File Expand all files Collapse all files
packages/types/src/auth.ts
+1
View File
@@ -16,6 +16,7 @@ export type AuthenticationMethod = (typeof AuthenticationMethod)[keyof typeof Au
export enum OidcErrorCode {
STATE_EXPIRED = "oidc_state_expired",
PRIVATE_ISSUER_ADDRESS = "oidc_private_issuer_address",
TLS_CERTIFICATE_UNTRUSTED = "oidc_tls_certificate_untrusted",
TOKEN_EXCHANGE_FAILED = "oidc_token_exchange_failed",
USER_NOT_PROVISIONED = "oidc_user_not_provisioned",
USER_INACTIVE = "oidc_user_inactive",