You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
First, we need to return proper errors in the interaction routes, such that the IDP can know why the interaction choice call failed (like expiry). This is being done in feat(auth): use gnap error middleware on idp api #3094.
Second, in the finish route handler, instead of checking the session nonce first, we should check that the interaction has expired. If it has, we should redirect back to the client redirect URI with result=interaction_expired query param. If not expired, we should then check the session nonce.
In general, other than the invalid session error, we should always redirect back to the client with the corresponding query param in the URL.
Context
result=interaction_expired
query param. If not expired, we should then check the session nonce.Todos
The text was updated successfully, but these errors were encountered: