mirror of
https://github.com/Rain-kl/OpenFlare.git
synced 2026-10-01 22:46:38 +08:00
ryan
895788974c
Bind OAuth state payloads to the initiating session token and user ID. Verifies session token hash continuity during callback, and validates that the user ID completing the binding flow matches the user ID that initiated it.
23 lines
1.2 KiB
Go
23 lines
1.2 KiB
Go
// Copyright 2025 linux.do
|
|
// Copyright 2026 Arctel.net
|
|
// SPDX-License-Identifier: Apache-2.0
|
|
|
|
package oauth
|
|
|
|
// OAuth 认证相关错误消息
|
|
const (
|
|
InvalidState = "非法登录请求"
|
|
IDTokenVerifyFailed = "ID Token 验证失败" //nolint:gosec // false positive: this is an error message, not hardcoded credentials
|
|
IDTokenVerifyFailedFormat = "%s: %w"
|
|
NonceMismatch = "nonce 不匹配，可能存在重放攻击"
|
|
NoActiveAuthSource = "未配置可用认证源"
|
|
ServerAddressMissing = "服务器地址 (server_address) 未配置或配置为空，请在后台系统设置中配置后再试"
|
|
AuthSourceRequired = "认证源不能为空"
|
|
DiscoveryURLRequired = "OIDC 认证源必须配置 Discovery URL"
|
|
UsernameGenerateFailed = "无法生成可用用户名"
|
|
UsernameFromSourceFailed = "无法从认证源获取用户名"
|
|
AuthSourceDisabled = "认证源未启用"
|
|
InvalidExternalAccountBindingID = "绑定记录 ID 无效"
|
|
TokenAuthNotAllowed = "该端点不允许使用访问令牌进行身份验证" //nolint:gosec // false positive: this is an error message, not hardcoded credentials
|
|
)
|