khakers / modmail-viewer

An advanced web frontend for the modmail discord bot with built in Discord OAuth2 authentication, and support for browsing and searching current and historical logs. Directly replaces logviewer.
MIT License
10 stars 4 forks source link

All OAuth2 authentication errors describe themselves as "invalid state" #42

Closed khakers closed 1 year ago

khakers commented 1 year ago

Any error that occurs during a specific part of the OAuth2 callback will display an "invalid state" http 400. This is very misleading since the error may not actually be due to invalid state on the clients behalf and thus shouldn't be an http 400. For server side errors, we should simply return a generic server side error