andy/blackwall-auth-sdk
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases 2 Wiki Activity

docs: clarify callback access_denied causes include privilege changes

Browse Source 
Update integration guidance so consuming apps treat access_denied as an expected provider authorization result when membership or privilege state changes during the OAuth consent flow.
This commit is contained in:
Andy Dixon
2026-02-26 11:39:50 +00:00
parent 44aa9e6f80
commit 7d0319332f
1 changed files with 1 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files
docs/INTEGRATION_GUIDE.md
+1 -1
View File
@@ -66,7 +66,7 @@ if (isset($_GET['error'])) {
$error = (string) $_GET['error']; $error = (string) $_GET['error'];
$description = isset($_GET['error_description']) ? (string) $_GET['error_description'] : 'Unknown provider error'; $description = isset($_GET['error_description']) ? (string) $_GET['error_description'] : 'Unknown provider error';
// access_denied is a normal authorisation outcome (for example, membership // access_denied is a normal authorisation outcome (for example, membership
// revoked or user denied consent between request and submit). // revoked, privilege changed, or user denied consent between request and submit).
http_response_code($error === 'access_denied' ? 403 : 400); http_response_code($error === 'access_denied' ? 403 : 400);
exit('Authorization failed: ' . $description); exit('Authorization failed: ' . $description);
} }