fix(oauth): use clearer instructions for login failure

BastiDood · Aug 10, 2024 · 2caa0a4 · 2caa0a4
1 parent 22fc864
commit 2caa0a4
Showing 1 changed file with 4 additions and 1 deletion.
diff --git a/app/src/routes/oauth/callback/+server.js b/app/src/routes/oauth/callback/+server.js
@@ -26,7 +26,10 @@ export async function GET({ fetch, locals: { db }, cookies, url: { searchParams
     const hashedSessionId = await crypto.subtle.digest('SHA-256', new TextEncoder().encode(sid));
     if (Buffer.from(state, 'base64url').compare(Buffer.from(hashedSessionId)) !== 0) {
         cookies.delete('sid', { path: '/', httpOnly: true, sameSite: 'lax' });
-        error(400, 'Session state mismatch detected. Please log in again or clear your browser cookies.');
+        error(
+            400,
+            'Session state mismatch detected. Please (1) refresh the page, (2) clear your browser cache cookies, or (3) log in again.',
+        );
     }
 
     const body = new URLSearchParams({