mirror of
https://github.com/Rain-kl/OpenFlare.git
synced 2026-09-29 22:06:38 +08:00
ryan
55 lines
3.2 KiB
Go
55 lines
3.2 KiB
Go
// Copyright 2026 Arctel.net
|
|
// SPDX-License-Identifier: Apache-2.0
|
|
|
|
package auth
|
|
|
|
// OAuth and Auth error messages
|
|
const (
|
|
errInvalidState = "非法登录请求"
|
|
errIDTokenVerifyFailed = "ID Token 验证失败" //nolint:gosec // false positive: this is an error message, not hardcoded credentials
|
|
errIDTokenVerifyFailedFormat = "%s: %w"
|
|
errNonceMismatch = "nonce 不匹配，可能存在重放攻击"
|
|
errNoActiveAuthSource = "未配置可用认证源"
|
|
errServerAddressMissing = "服务器地址 (server_address) 未配置或配置为空，请在后台系统设置中配置后再试"
|
|
errAuthSourceRequired = "认证源不能为空"
|
|
errDiscoveryURLRequired = "OIDC 认证源必须配置 Discovery URL"
|
|
errUsernameGenerateFailed = "无法生成可用用户名"
|
|
errUsernameFromSourceFailed = "无法从认证源获取用户名"
|
|
errAuthSourceDisabled = "认证源未启用"
|
|
errInvalidExternalAccountBindingID = "绑定记录 ID 无效"
|
|
ErrTokenAuthNotAllowed = "该端点不允许使用访问令牌进行身份验证" //nolint:gosec // false positive: this is an error message, not hardcoded credentials
|
|
errOAuthStateRateLimited = "请求授权过于频繁，请稍后重试"
|
|
errAuthSourceNameRequired = "认证源名称不能为空"
|
|
errAuthSourceNameInvalid = "认证源名称格式不正确"
|
|
errAuthSourceTypeUnsupported = "不支持的认证源类型"
|
|
errAuthSourceDiscoveryURLRequired = "Discovery URL 不能为空"
|
|
//nolint:gosec // error message, not hardcoded credentials
|
|
errAuthSourceClientCredentialsRequired = "启用认证源时必须配置 Client ID 和 Client Secret"
|
|
errAuthSourceIDRequired = "认证源 ID 不能为空"
|
|
errUserIDRequired = "用户 ID 不能为空"
|
|
errExternalAccountBindingIncomplete = "外部帐号绑定信息不完整"
|
|
errExternalAccountAlreadyBoundToAnother = "该外部帐号已被其他用户绑定"
|
|
errExternalAccountBindingIDRequired = "外部帐号绑定记录 ID 不能为空"
|
|
errAdminRequired = "无权访问"
|
|
//nolint:gosec // error message, not hardcoded credentials
|
|
errTokenAdminRequired = "令牌无管理员权限"
|
|
errBannedAccount = "账号已被封禁"
|
|
errUnAuthorized = "未登录"
|
|
)
|
|
|
|
// Service 层与鉴权中间件内部错误文案（保持与重构前逐字一致）
|
|
const (
|
|
errUserNotInContext = "auth: user not found in context"
|
|
errEmptyToken = "auth: empty token" //nolint:gosec // false positive: this is an error message, not hardcoded credentials
|
|
errSystemUserTokenNotAllowed = "auth: system user token not allowed" //nolint:gosec // false positive: this is an error message, not hardcoded credentials
|
|
errUnauthorizedInternal = "unauthorized"
|
|
errSystemUserLoginNotAllowed = "system user is not allowed to login"
|
|
)
|
|
|
|
// OAuth 回调会话校验错误文案（保持与重构前逐字一致）
|
|
const (
|
|
errInvalidSessionContext = "invalid session context"
|
|
errSessionMismatchForOAuth = "session mismatch for oauth state"
|
|
errUserContextMismatch = "user context mismatch for oauth binding"
|
|
)
|