Add specific error codes for Authentication failures in OpenIddict To…

…kenController.Password
abpframework · Sep 3, 2024 · bdc2424 · bdc2424
1 parent d9fbfac
commit bdc2424
Showing 1 changed file with 6 additions and 1 deletion.
diff --git a/...olo.Abp.OpenIddict.AspNetCore/Volo/Abp/OpenIddict/Controllers/TokenController.Password.cs b/...olo.Abp.OpenIddict.AspNetCore/Volo/Abp/OpenIddict/Controllers/TokenController.Password.cs
@@ -108,10 +108,13 @@ await IdentitySecurityLogManager.SaveAsync(new IdentitySecurityLogContext
                     });
 
                     string errorDescription;
+                    string errorCode;
+
                     if (result.IsLockedOut)
                     {
                         Logger.LogInformation("Authentication failed for username: {username}, reason: locked out", request.Username);
                         errorDescription = "The user account has been locked out due to invalid login attempts. Please wait a while and try again.";
+                        errorCode = "account_locked"
                     }
                     else if (result.IsNotAllowed)
                     {
@@ -128,16 +131,18 @@ await IdentitySecurityLogManager.SaveAsync(new IdentitySecurityLogContext
                         }
 
                         errorDescription = "You are not allowed to login! Your account is inactive or needs to confirm your email/phone number.";
+                        errorCode = "account_inactive"
                     }
                     else
                     {
                         Logger.LogInformation("Authentication failed for username: {username}, reason: invalid credentials", request.Username);
                         errorDescription = "Invalid username or password!";
+                        errorCode = OpenIddictConstants.Errors.InvalidGrant
                     }
 
                     var properties = new AuthenticationProperties(new Dictionary<string, string>
                     {
-                        [OpenIddictServerAspNetCoreConstants.Properties.Error] = OpenIddictConstants.Errors.InvalidGrant,
+                        [OpenIddictServerAspNetCoreConstants.Properties.Error] = errorCode,
                         [OpenIddictServerAspNetCoreConstants.Properties.ErrorDescription] = errorDescription
                     });