TheAnachronism/docspell
1
0
Fork 0
mirror of https://github.com/TheAnachronism/docspell.git synced 2025-06-22 02:18:26 +00:00
Code Issues Packages Projects Releases Wiki Activity

Improve error messages when using oidc with an existing account

Browse Source 
If an account was created before locally (by signing up at docspell)
and the same account is later tried to signin via openid, a better
error message is shown in the logs to be able to act on it. The user
won't see any details in the webapp.

Issue: #1827 #1781
This commit is contained in:
eikek
2022-11-04 20:45:30 +01:00
parent dee7534e34
commit 14643ae4d1
2 changed files with 14 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

10
modules/backend/src/main/scala/docspell/backend/auth/Login.scala
View File

@ -73,8 +73,13 @@ object Login {
case object InvalidAuth extends Result {
val toEither = Left("Authentication failed.")
}
case class InvalidAccountSource(account: AccountId) extends Result {
val toEither = Left(
s"The account '${account.asString}' already exists from a different source (local vs openid)!"
)
}
case object InvalidTime extends Result {
val toEither = Left("Authentication failed.")
val toEither = Left("Authentication failed due expired authenticator.")
}
case object InvalidFactor extends Result {
val toEither = Left("Authentication requires second factor.")
@ -85,6 +90,7 @@ object Login {
def invalidAuth: Result = InvalidAuth
def invalidTime: Result = InvalidTime
def invalidFactor: Result = InvalidFactor
def invalidAccountSource(account: AccountId): Result = InvalidAccountSource(account)
}
def apply[F[_]: Async](store: Store[F], totp: Totp): Resource[F, Login[F]] =
@ -99,6 +105,8 @@ object Login {
res <- data match {
case Some(d) if checkNoPassword(d, Set(AccountSource.OpenId)) =>
doLogin(config, d.account, false)
case Some(d) if checkNoPassword(d, Set(AccountSource.Local)) =>
Result.invalidAccountSource(accountId).pure[F]
case _ =>
Result.invalidAuth.pure[F]
}