[java-idp-plugin-vci] 06/07: more accurate error codes

[Codeberg]

This is an automated email from the git hooks/post-receive script.

codeberg pushed a commit to branch main
in repository java-idp-plugin-vci.

View the commit online:
https://codeberg.org/Shibboleth/java-idp-plugin-vci/commit/4eb7eedba8875b17220e29abcb95dc28dc45f183

commit 4eb7eedba8875b17220e29abcb95dc28dc45f183
Author: Janne Lauros <janne.lauros at csc.fi>
AuthorDate: Thu Sep 24 16:15:41 2026 +0300

    more accurate error codes
---
 .../net/shibboleth/idp/flows/openid/vci/token/token-beans.xml        | 5 +++++
 1 file changed, 5 insertions(+)

diff --git a/openid-vci-impl/src/main/resources/META-INF/net/shibboleth/idp/flows/openid/vci/token/token-beans.xml b/openid-vci-impl/src/main/resources/META-INF/net/shibboleth/idp/flows/openid/vci/token/token-beans.xml
index f7958ce..fe12a93 100644
--- a/openid-vci-impl/src/main/resources/META-INF/net/shibboleth/idp/flows/openid/vci/token/token-beans.xml
+++ b/openid-vci-impl/src/main/resources/META-INF/net/shibboleth/idp/flows/openid/vci/token/token-beans.xml
@@ -860,6 +860,11 @@
                     value="#{T(com.nimbusds.oauth2.sdk.OAuth2Error).INVALID_GRANT}" />
                 <entry key="#{T(org.geant.shibboleth.plugin.openidvci.profile.OpenIDVCIEventIds).NO_CREDENTIAL_OFFER}"
                     value="#{T(com.nimbusds.oauth2.sdk.OAuth2Error).INVALID_GRANT}" />
+                <!-- Both are of PKCE validation, RFC 7636 section 4.6. -->
+                <entry key="#{T(org.opensaml.profile.action.EventIds).INVALID_MESSAGE}"
+                    value="#{T(com.nimbusds.oauth2.sdk.OAuth2Error).INVALID_GRANT}" />
+                <entry key="#{T(org.opensaml.profile.action.EventIds).MESSAGE_AUTHN_ERROR}"
+                    value="#{T(com.nimbusds.oauth2.sdk.OAuth2Error).INVALID_GRANT}" />
                 <entry key="#{T(org.opensaml.profile.action.EventIds).INVALID_PROFILE_CTX}"
                     value="#{T(com.nimbusds.oauth2.sdk.OAuth2Error).SERVER_ERROR}" />
                 <entry key="#{T(org.opensaml.profile.action.EventIds).INVALID_MSG_CTX}"

-- 
To stop receiving notification emails like this one, please contact
the administrator of this repository.