Errors
Every failure is an OidcError, an HttpError with a code; identify it with isOidcError, which also works across two copies of the package.
Every failure is an OidcError, an HttpError with a code; identify it with isOidcError, which also works across two copies
of the package.
| Code | Status | Meaning |
|---|---|---|
OIDC_STATE_MISSING, OIDC_STATE_INVALID, OIDC_STATE_EXPIRED |
400 | no state, an unknown, repeated or foreign one, a sign-in older than ten minutes |
OIDC_ISSUER_MISMATCH |
400 | the iss parameter is wrong or missing |
OIDC_AUTHORIZATION_ERROR |
400 | the provider refused (for example access_denied); see providerError |
OIDC_TOKEN_ERROR |
400 | the token endpoint refused the code, or the answer is not a bearer token |
OIDC_ID_TOKEN_INVALID, OIDC_USERINFO_INVALID |
401 | a rule of the section above failed |
OIDC_NOT_SIGNED_IN, OIDC_REFRESH_FAILED |
401 | no session tokens, or the provider ended the grant |
OIDC_DISCOVERY_FAILED, OIDC_JWKS_FAILED, OIDC_UPSTREAM_ERROR, OIDC_RESPONSE_TOO_LARGE |
502 | the provider is down, answers nonsense or too much |
OIDC_TIMEOUT |
504 | the provider did not answer in time |
OIDC_INSECURE_URL, OIDC_UNSUPPORTED |
500 | a configuration the client refuses (plain http outside development), or a feature the runtime lacks |
The message of an OidcError is a fixed sentence; it never contains text from the browser or the provider.