Indieauth server error page does not detail the url

[SaphireLattice]

Ended up with a mystery 404 because of an error in what the server was reporting, but it took a while to debug what was going on because Indielogin did not report the URL it was erroring on. Would be really nice to have the path of the URL get shown.

[aaronpk]

I don't have enough information to go off of here... what URL was giving you the 404? What did you do prior to getting this error? What URL did you enter to start the flow?

[SaphireLattice]

When going through the auth flow and authorizing the Indielogin's request, the client redirect page that shows the status of response between Indielogin and the IdP can show that something went wrong on "user" side. The uh, user_error.php.

That error page can report 404 and other error codes on the side of whatever indieauth server, and the body of the response, but it never mentions what URL Indielogin was interacting with.

[aaronpk]

Sorry, I'm still not clear on whether you're talking about indielogin.com as the IdP to a website you're logging in to, or indielogin.com as a client trying to log in to your own IdP. Please tell me the sequence of steps you performed before getting the error message, and tell me as much as you can about the error message you saw, including what domain name your browser shows when you see the error message.

[SaphireLattice]

0. Have a site with whatever Indieauth IdP set up with elements
1. Open indielogin.com
2. Type your site url in the "try it" prompt
3. Go through the flow, etc etc
4. Go through the client redirect from IdP to Indielogin, you are now on indielogin.com
5. If there was an error in redeeming the token by Indielogin from user's IdP, the user_error.php view can show up, detailing the error code and error body but not the url which Indielogin was trying to interact with.

indielogin.com/views/auth/user-error.php

Line 23 in f257ad1

<p>Response Code: <code><?= $opts['response_code'] ?></code></p>

This is the specific error I am talking about here, when Indielogin's request to IdP fails for some reason or another.

In my case it was my indieauth IdP reporting incorrect url in the oauth metadata, pointing at non-existent token endpoint. Indielogin only reported that it got a status code 404 from my IdP, but not where exactly it got it from. So and I had to dig through nginx access log to figure out what Indielogin was making requests to.