@idp.global/sdk 19.5.0 → 19.6.0

package/ts_relyingparty/testing.ts

@@ -231,16 +231,20 @@ export class RelyingPartyProviderDouble implements IOidcProvider {
 
   public async completeAuthorization(optionsArg: IOidcCompletionOptions): Promise<IOidcCompletion> {
     if (!this.#discovered) {
-      throw new OidcCompletionError('token_exchange', notDiscovered());
+      throw new OidcCompletionError('token_exchange', notDiscovered(), { code: 'provider_unreachable' });
     }
     const code = optionsArg.callbackUrl.searchParams.get('code') ?? '';
     const issued = this.#codes.get(code);
     this.#codes.delete(code);
     if (!issued || issued.state !== optionsArg.state) {
-      throw new OidcCompletionError('token_exchange', new Error('unknown, used or foreign code'));
+      // what idp.global's token endpoint answers for such a code
+      throw new OidcCompletionError('token_exchange', new Error('unknown, used or foreign code'), {
+        code: 'token_exchange_refused',
+        oauthError: 'invalid_grant',
+      });
     }
     if (issued.nonce !== optionsArg.nonce) {
-      throw new OidcCompletionError('token_validation', new Error('nonce mismatch'));
+      throw new OidcCompletionError('token_validation', new Error('nonce mismatch'), { code: 'login_mismatch' });
     }
     this.completions.push({ subject: issued.subject, state: issued.state });
     if (this.completionFailure) {