Incorrect Error Mapping for OAuth2 Hybrid Flow Configuration Errors

[aaujayasena]

Description

When an OAuth2 request is made with a response type that is not configured for the hybrid flow in the application, the error page displays a generic "Something went wrong" message instead of a meaningful error message.

https://localhost:9443/authenticationendpoint/oauth2_error.do?oauthErrorCode=invalid_client&oauthErrorMsg=Requested+response+type+code+token+is+not+configured+for+the+hybrid+flow+for+the+application.&crId=4bb1cfcb-25dd-4027-8eb1-13bf92ceffeb&spId=21785579-2969-49d3-8652-24176e5b1d2c

Steps to Reproduce

1. Configure an application in IS with a response type "code id_token"
2. Attempt to authenticate using a different response type combination such as "code token".
   Request
   https://localhost:9443/oauth2/authorize?response_type=code token&client_id=QsBUsTh7yw2wDT4YATkMU4B0OgAa&nonce=ndb&redirect_uri=https://oidcdebugger.com/debug&scope=openid
3. Observe the error page
4. Note that the page does not display a clear error message related to the response type configuration issue.

Version

IS 7.1.0-m6

Environment Details (with versions)

DB : Postgres

[aaujayasena]

Root Cause Analysis

The getErrorCodeToi18nMapping method in the AuthenticationEndpointUtil class constructs an error key based on the error code and sub-error code [1][2]. However, this key does not exist in the ERROR_TO_I18N_MAP [3] in the Constants class, leading to the default fallback message.

[1] https://github.com/wso2/carbon-identity-framework/blob/master/components/authentication-framework/org.wso2.carbon.identity.application.authentication.endpoint.util/src/main/java/org/wso2/carbon/identity/application/authentication/endpoint/util/AuthenticationEndpointUtil.java#L243
[2] https://github.com/wso2/identity-apps/blob/master/identity-apps-core/apps/authentication-portal/src/main/webapp/oauth2_error.jsp#L101
[3] https://github.com/wso2/carbon-identity-framework/blob/master/components/authentication-framework/org.wso2.carbon.identity.application.authentication.endpoint.util/src/main/java/org/wso2/carbon/identity/application/authentication/endpoint/util/Constants.java#L141