Component: OIDC v1.0.10Issue: Error messages from custom user provisioning are lost in the authentication flow
Hi everyone,
I'm using the OIDC application for SSO implementation based on OpenID Connect. The application works perfectly - after simple configuration I had a working SSO solution.
However, during final implementation I've encountered an issue with error handling when using custom error pages and custom user provisioning.
Problem Description:
Custom_User_Check action: When an error occurs in my user provisioning logic, the error is properly returned via the ErrorMessage output variable.
DoLogin_Internal action: This action calls Custom_User_Check and correctly handles errors by adding the error message as a URL parameter to the custom error URL. This part works fine.
ParseCodeResponse action: This action calls DoLogin_Internal and has its own ErrorMessage output, but this is only used for initial code validation. When DoLogin_Internal returns an error, nothing is done with the RedirectURL or ErrorMessage - only the Success output variable is set to false.
Redirect endpoint: When DoLogin_Internal.Success is false, GetErrorPageURL is called to redirect to the error page. However, the error message and error URL with parameters from ParseCodeResponse are not available.
Result: Users are redirected to the error page but without any error message, making troubleshooting impossible.
Question: Is this a gap in the component's error handling flow, or am I missing something in the configuration/implementation?
It seems like the error message should be propagated up through ParseCodeResponse to be available when GetErrorPageURL is called.
Expected Behavior: Error messages from custom user provisioning should reach the error page so users can understand what went wrong.
Has anyone encountered this issue or found a workaround? Any insights would be appreciated.
Thanks!
Hi @Bernard van der Linden ,Thank you for reporting this.I'll look into it.Regards,
Hi João,
Thank you for the quick response!
If you need any additional information or clarification to investigate this issue, please let me know.
Hope you're well! Just checking in on the error handling issue I reported in September with the OIDC v1.0.10 component.
Any updates on the investigation? We're getting ready to roll this out for a key business app, so I'm curious about the status.
Also wondering - is the component still actively maintained? We'd love to know we're building on something that gets regular updates and security patches, especially for production use.
Thanks for any insights you can share!
Cheers,Ben