feat(oidc): explicit rejection reason

Show explicitly login rejection (for example when a user does not have a valid
email reported from OIDC but email verification is set)
This commit is contained in:
Edouard Vanbelle
2026-08-14 13:13:43 +02:00
parent 5d44b0ea75
commit 0d5a726ef4
21 changed files with 419 additions and 70 deletions
+2
View File
@@ -737,6 +737,8 @@
"login_error_email_ambiguous": "Multiple local accounts match this email address. Contact your administrator to resolve.",
"login_error_callback_denied": "Your sign-in link expired or was already used. Please try signing in again.",
"login_error_callback_failed": "SSO sign-in couldn't complete. Please try again.",
"login_error_email_not_verified_at_idp": "Your identity provider reports that your email address is not verified. Confirm your email at your identity provider, then try signing in again.",
"login_error_email_verification_required": "This server requires a verified email. Your identity provider did not include an email-verification claim. Contact your administrator.",
"login_error_generic": "SSO sign-in was refused. Please try again."
},
"storage": {