fix: redirect client back to base URL incase of error

shelmangroup · Sep 2, 2024 · 9989e24 · 9989e24
1 parent ac81d9d
commit 9989e24
Showing 1 changed file with 3 additions and 0 deletions.
diff --git a/authz/authz.go b/authz/authz.go
@@ -237,6 +237,9 @@ func (s *Service) authProcess(ctx context.Context, req *auth.AttributeContext_Ht
 			// and request against the idp will be retried, which means less
 			// confusing for the user.
 			if strings.HasPrefix(err.Error(), `oauth2: "invalid_grant"`) {
+				// Redirect the client back to the base URL
+				baseUrl, _ := url.Parse(provider.CallbackURI)
+				sessionData.RequestedUrl = baseUrl.Scheme + "://" + baseUrl.Host
 				slog.Error("Invalid grant",
 					slog.String("err", err.Error()),
 					slog.String("url", requestedURL),