@broberg/sso 0.12.0 → 0.12.1
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/README.md +1 -1
- package/dist/hono.cjs +5 -1
- package/dist/hono.cjs.map +1 -1
- package/dist/hono.js +5 -1
- package/dist/hono.js.map +1 -1
- package/package.json +1 -1
package/README.md
CHANGED
|
@@ -510,7 +510,7 @@ fact the server gave away for free. Reported by helpdesk, 22 September 2026.
|
|
|
510
510
|
**The operator still gets all three.** `onCallbackRefused(cause, c)` receives the
|
|
511
511
|
precise cause on every refusal; without it the adapter writes
|
|
512
512
|
`[@broberg/sso] /callback refused: <cause>` with `console.warn`. Watch for
|
|
513
|
-
`unreadable` on real users: that is what a rotated `SSO_COOKIE_SECRET` looks like.
|
|
513
|
+
`unreadable` on real users: that is what a rotated `SSO_COOKIE_SECRET` looks like. A hook that throws is reported with `console.error` and the refusal still stands (0.12.1); it never becomes a 500.
|
|
514
514
|
|
|
515
515
|
```ts
|
|
516
516
|
ssoRoutes({
|
package/dist/hono.cjs
CHANGED
|
@@ -909,7 +909,11 @@ function ssoRoutes(options = {}) {
|
|
|
909
909
|
message: "This browser's login cookie could not be read. Begin again from the login page."
|
|
910
910
|
}
|
|
911
911
|
};
|
|
912
|
-
|
|
912
|
+
try {
|
|
913
|
+
await onCallbackRefused(parsed.reason, c);
|
|
914
|
+
} catch (err) {
|
|
915
|
+
console.error("[@broberg/sso] onCallbackRefused threw; the refusal stands", err);
|
|
916
|
+
}
|
|
913
917
|
const shown = callbackErrors === "single" && parsed.reason !== "absent" ? {
|
|
914
918
|
status: 400,
|
|
915
919
|
error: "login_failed",
|