mirror of
https://github.com/Rain-kl/OpenFlare.git
synced 2026-10-01 14:46:36 +08:00
ryan
ae3b792e16
- add util.Go with panic recovery for background goroutines - add util.EscapeLike and explicit ESCAPE clause for SQL LIKE queries - add DummyCheckPassword and subtle.ConstantTimeCompare against timing attacks - enforce session ID rotation upon login/oauth callback to prevent session fixation - add sliding window login failure rate limiting and oauth state rate limiting - fix redis client capture race in pubsub listeners and wait on stop channel - adjust global --primary to oklch(51.1% 0.262 276.966) for WCAG AA contrast - fix semantic heading levels and missing aria-labels across UI components - document security, concurrency, and a11y standards in AGENTS.md
24 lines
1.3 KiB
Go
24 lines
1.3 KiB
Go
// Copyright 2025 linux.do
|
|
// Copyright 2026 Arctel.net
|
|
// SPDX-License-Identifier: Apache-2.0
|
|
|
|
package oauth
|
|
|
|
// OAuth 认证相关错误消息
|
|
const (
|
|
errInvalidState = "非法登录请求"
|
|
errIDTokenVerifyFailed = "ID Token 验证失败" //nolint:gosec // false positive: this is an error message, not hardcoded credentials
|
|
errIDTokenVerifyFailedFormat = "%s: %w"
|
|
errNonceMismatch = "nonce 不匹配，可能存在重放攻击"
|
|
errNoActiveAuthSource = "未配置可用认证源"
|
|
errServerAddressMissing = "服务器地址 (server_address) 未配置或配置为空，请在后台系统设置中配置后再试"
|
|
errAuthSourceRequired = "认证源不能为空"
|
|
errDiscoveryURLRequired = "OIDC 认证源必须配置 Discovery URL"
|
|
errUsernameGenerateFailed = "无法生成可用用户名"
|
|
errUsernameFromSourceFailed = "无法从认证源获取用户名"
|
|
errAuthSourceDisabled = "认证源未启用"
|
|
errInvalidExternalAccountBindingID = "绑定记录 ID 无效"
|
|
ErrTokenAuthNotAllowed = "该端点不允许使用访问令牌进行身份验证" //nolint:gosec // false positive: this is an error message, not hardcoded credentials
|
|
errOAuthStateRateLimited = "请求授权过于频繁，请稍后重试"
|
|
)
|