Authorization with a token can fail for a variety of reasons (see oidc-security-state-validation.service.ts).
In our project we have the requirement to show verbose feedback to the user if e.g. he is unauthorized because his local system clock is off (log message "id_token was issued too far away from the current time").
For this it would be great if onAuthorizationResult would receive not only the status "unauthorized", but also an enum value with the reason for the failed authorization.
@hannesrohde This would be possible for the client validation failures, but the server errors are just 401 in most cases.
Greetings Damien
@damienbod Thank you for your response!
Sure, if the token is invalid the server will not accept it and respond accordingly.
For our usecase, feedback about client-side validation errors would be helpful to display a meaningful error message when there is a wrong clock on the client side.
Will be released in version 7.0.0
Most helpful comment
@damienbod Thank you for your response!
Sure, if the token is invalid the server will not accept it and respond accordingly.
For our usecase, feedback about client-side validation errors would be helpful to display a meaningful error message when there is a wrong clock on the client side.