DEV: Update DiscourseConnect nonce errors to be more descriptive (#14858)

2025-05-31 01:47:46 +08:00 · 2021-11-09 17:39:05 +00:00
parent 769d53ff09
commit 5ac10e2e79
2 changed files with 15 additions and 2 deletions
--- a/app/models/discourse_single_sign_on.rb
+++ b/app/models/discourse_single_sign_on.rb
@ -50,8 +50,10 @@ class DiscourseSingleSignOn < SingleSignOn
  def nonce_error
    if Discourse.cache.read(used_nonce_key).present?
      "Nonce has already been used"
+    elsif SiteSetting.discourse_connect_csrf_protection
+      "Nonce is incorrect, was generated in a different browser session, or has expired"
    else
-      "Nonce has expired"
+      "Nonce is incorrect, or has expired"
    end
  end