if the user is not in the required github or then dex returns 500 along with "Failed to authenticate: github: user "wibble" is not in required orgs or teams".
However - this should not be a 500 error code but a 403 - the user is authenticated - they just have no authorisation to proceed.
or to put it another way the Internal server error makes it look to the user as though this is something that can be fixed by retrying.
Yeah, it would be good to be able to differentiate these! 馃槂
can i take this one?
Most helpful comment
can i take this one?