manfredsteyer / angular-oauth2-oidc

Support for OAuth 2 and OpenId Connect (OIDC) in Angular.
MIT License
1.89k stars 688 forks source link

IDP errors not handled during initLoginFlowInPopup #1404

Open Servonius opened 6 months ago

Servonius commented 6 months ago

Describe the bug When using initLoginFlowInPopup and an error on the IDP side occurs (like an 500 internal server error) the popup window redirects back to the origin (instead of the silentRefreshRedirectUri) and the popup window is still open. I have set the silentRefreshRedirectUri in the config and using the advanced implementation of the silent-refresh.html (described in the docs) but it isn't used when an IDP error occurs. My silent-refresh-setup is working because when no IDP error occurs, the popup window is closed and everything is working as expected.

Expected behavior Popup window closes and the catch of initLoginFlowInPopup should handle the error when an error on the IDP side occurs.

Desktop (please complete the following information):