Class OidcCallbackFailureLogEntry

Namespace

SEBT.Portal.Core.Services

Assembly

SEBT.Portal.Core.dll

Fields attached to an off-boarding OIDC failure log line.

public sealed record OidcCallbackFailureLogEntry

Inheritance

object

OidcCallbackFailureLogEntry

Properties

ApiError

Portal error message returned to the browser (sanitized).

public string? ApiError { get; init; }

Property Value

string

HasCode

For missing_params: whether the authorization code query param was present.

public bool? HasCode { get; init; }

Property Value

bool?

HasState

For missing_params: whether the OAuth state query param was present.

public bool? HasState { get; init; }

Property Value

bool?

HttpStatus

HTTP status when the failure came from an API response. Pass-through diagnostic data for the off-boarding dashboards — populated by whichever layer knows the status, never interpreted by inner layers.

public int? HttpStatus { get; init; }

Property Value

int?

IdpError

OAuth error from an IdP redirect or token response.

public string? IdpError { get; init; }

Property Value

string

IdpErrorDescription

OAuth error_description (sanitized and truncated before logging).

public string? IdpErrorDescription { get; init; }

Property Value

string

IsStepUp

Whether the flow was step-up.

public bool? IsStepUp { get; init; }

Property Value

bool?

Phase

callback or complete-login when the failure is tied to an API phase.

public string? Phase { get; init; }

Property Value

string

PortalUserId

Portal user GUID when known. When omitted, resolved from the authenticated JWT on the current HTTP request (e.g. step-up while already signed in). Absent on first login.

public Guid? PortalUserId { get; init; }

Property Value

Guid?

Reason

Machine-readable cause. Examples: idp_redirect, missing_params, token_exchange_rejected, missing_session.

public required string Reason { get; init; }

Property Value

string

SessionId

Pre-auth session id when available.

public string? SessionId { get; init; }

Property Value

string