LocalAI [bot] 9e41be4bfb fix(auth): log the real cause of OIDC/OAuth user-info failures (#10679) ...

The OAuth callback discarded the error returned by user-info resolution
before sending the generic 500, so real failures were completely opaque
in the logs: ID-token verification errors (e.g. issuer/audience mismatch
behind a reverse proxy), a missing id_token, claim-parse errors, or a
rejecting GitHub userinfo endpoint all collapsed into
"failed to fetch user info" with nothing logged.

Log the wrapped cause with xlog.Error (provider + error), matching the
code-exchange step just above it. The client-facing message is unchanged,
so no internal detail leaks to the browser.

Refs #10677


Assisted-by: Claude:claude-opus-4-8 [Claude Code]

Signed-off-by: Ettore Di Giacinto <mudler@localai.io>
Co-authored-by: Ettore Di Giacinto <mudler@localai.io>

2026-07-04 19:33:53 +02:00

..

application

feat(realtime): eager blocking pipeline warm-up + /backend/load API (#10662)

2026-07-03 18:00:37 +02:00

backend

feat(realtime): eager blocking pipeline warm-up + /backend/load API (#10662)

2026-07-03 18:00:37 +02:00

cli

fix(backends): make backend install ops idempotent unless forced (#10643)

2026-07-02 19:16:29 +02:00

clients

security(http): refuse redirects on outbound clients via hardened pkg/httpclient (#10087)

2026-05-30 12:04:10 +02:00

config

Revert "feat(config): default swa_full:true for sliding-window-attention models" (#10674)

2026-07-03 22:46:44 +02:00

dependencies_manager

feat(ui): move to React for frontend (#8772)

2026-03-05 21:47:12 +01:00

explorer

feat(middleware): Model routing, PII filtering, Cloud model proxies (#9802)

2026-05-25 09:28:27 +02:00

gallery

fix(gallery): block SSRF in gallery config URL fetch (#10665) (#10673)

2026-07-03 21:32:42 +00:00

http

fix(auth): log the real cause of OIDC/OAuth user-info failures (#10679)

2026-07-04 19:33:53 +02:00

p2p

feat: add distributed mode (#9124)

2026-03-30 00:47:27 +02:00

schema

feat(realtime): eager blocking pipeline warm-up + /backend/load API (#10662)

2026-07-03 18:00:37 +02:00

services

feat(pii): export PII/audit events as a Prometheus counter (#10641)

2026-07-03 20:36:15 +00:00

startup

feat(gallery): verify backend OCI images with keyless cosign (#9823)

2026-05-18 08:02:20 +02:00

templates

fix(openresponses): populate Content and accept bare {role,content} items (#10039) (#10040)

2026-05-28 07:21:48 +00:00

trace

feat(realtime): eager blocking pipeline warm-up + /backend/load API (#10662)

2026-07-03 18:00:37 +02:00