SteveTheEngineer 764e75d9b9 Catch the error before the response is processed by goth. (#20000) (#20102) ... The code introduced by #18185 gets the error from response after it was processed by goth. That is incorrect, as goth (and golang.org/x/oauth) doesn't really care about the error, and it sends a token request with an empty authorization code to the server anyway, which always results in a `oauth2: cannot fetch token: 400 Bad Request` error from goth. It means that unless the "state" parameter is omitted from the error response (which is required to be present, according to [RFC 6749, Section 4.1.2.1](https://datatracker.ietf.org/doc/html/rfc6749#section-4.1.2.1)) or the page is reloaded (makes the session invalid), a 500 Internal Server Error page will be displayed. This fixes it by handling the error before the request is passed to goth.		2022-06-24 10:05:23 +08:00
..
2fa.go
auth.go	Prevent NPE when cache service is disabled (#19703)	2022-05-21 22:29:49 +08:00
linkaccount.go
main_test.go
oauth.go	Catch the error before the response is processed by goth. (#20000) (#20102)	2022-06-24 10:05:23 +08:00
oauth_test.go	Use DisplayName() instead of FullName in Oauth provider (#19991)	2022-06-16 23:29:54 +01:00
openid.go
password.go	Prevent NPE when cache service is disabled (#19703)	2022-05-21 22:29:49 +08:00
webauthn.go