raystack / frontier / 29902145949

46%

main: 47%

Pull #1790

github

fix(auth): return 4xx for malformed state in AuthCallback

A malformed (non-base64) state made ExtractFlowFromOIDCState fail, which
FinishFlow turned into ErrUnsupportedMethod and the handler mapped to a
500. An empty or invalid state already returned a 400, so the same class
of bad client input gave two different codes.

Map ErrUnsupportedMethod to CodeInvalidArgument in AuthCallback so a bad
state is a 4xx, consistent with the empty-state case.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

6 of 18 new or added lines in 2 files covered. (33.33%)

17785 of 38479 relevant lines covered (46.22%)

13.36 hits per line