public_git
/
oauth2-proxy
mirror of https://github.com/oauth2-proxy/oauth2-proxy.git
1
0
Fork 0
Code Issues Projects Releases Wiki Activity

Use friendly login-failed message for malformed state error page 

Keeps err.Error() as the debug-only message and shows a user-facing
message consistent with the other 403 auth-failure branches in
OAuthCallback, per review feedback on PR #3453.
This commit is contained in:
Elaine Souza 2026-08-04 09:31:06 -03:00
parent 96c5ab6e19
commit b8a981fea9
1 changed files with 1 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
oauthproxy.go
View File

@ -913,7 +913,7 @@ func (p *OAuthProxy) OAuthCallback(rw http.ResponseWriter, req *http.Request) {
// the pre-v7.7.1 behaviour and is consistent with the other auth-failure // the pre-v7.7.1 behaviour and is consistent with the other auth-failure
// paths below (CSRF cookie missing, CSRF mismatch), which also return 403. // paths below (CSRF cookie missing, CSRF mismatch), which also return 403.
logger.Errorf("Error while parsing OAuth2 state: %v", err) logger.Errorf("Error while parsing OAuth2 state: %v", err)
p.ErrorPage(rw, req, http.StatusForbidden, err.Error()) p.ErrorPage(rw, req, http.StatusForbidden, err.Error(), "Login Failed: invalid or missing state parameter.")
return return
} }