authgear / authgear/authgear-server

[Github Integration] Authflow will return 500 if passing in an invalid oauth code

Open
#4,160 1 comment 0 reactions 0 assignees View on GitHub
bug/minor
Dominant language
Go
Stars
2k
Forks
125
Avg merge
2d 17h
Merged PRs (30d)
32

Description

It seems error in code exchange isn't handled correctly, therefore the user info endpoint returned 401 which cause 500 in our api.

Contributor guide

Open the contributing guide

Research direction

The issue mentions the GitHub OAuth code-exchange flow and user-info endpoint; start by tracing that path through the 401 response for an invalid code. Done means the invalid OAuth code is handled without the API returning 500, with the resulting behavior verified through the relevant existing test path.

Written by the indexing model from the issue text.

Assessment

Tech stack
go
Domain
api, authentication
Issue type
Bug
Difficulty
4/5
Estimated time
3-5 days
Activity status
Stale
Clarity
Needs clarification
Newbie friendliness
35/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.