pomerium / pomerium / 24360553867

52%

Build Type

push

github

Committed by web-flow

Commit Message

fix: render HTML error pages for MCP authorize endpoint (#6252)

## Summary

The `/.pomerium/mcp/authorize` endpoint is browser-facing but returns
bare JSON error responses (e.g. `{"error":"invalid_grant"}`). Users see
raw JSON instead of Pomerium's standard HTML error page, and the error
description is not surfaced.

This switches all error responses in the authorize handler to use
Pomerium's built-in HTML error rendering with descriptive messages.

## Related issues

- ENG-3857

## User Explanation

When MCP OAuth authorization fails (e.g. invalid client, redirect URI
mismatch, bad request), users now see Pomerium's standard error page
with a human-readable description of what went wrong, instead of a raw
JSON blob.

## Checklist

- [x] reference any related issues
- [x] updated unit tests
- [x] add appropriate label (`enhancement`, `bug`, `breaking`,
`dependencies`, `ci`)
- [ ] ready for review

Coverage Stats

0 of 23 new or added lines in 1 file covered. (0.0%)

19 existing lines in 7 files now uncovered.

35103 of 77259 relevant lines covered (45.44%)

114.5 hits per line