{"action":"opened","issue":{"url":"https://api.github.com/repos/sandstorm-io/sandstorm/issues/1798","repository_url":"https://api.github.com/repos/sandstorm-io/sandstorm","labels_url":"https://api.github.com/repos/sandstorm-io/sandstorm/issues/1798/labels{/name}","comments_url":"https://api.github.com/repos/sandstorm-io/sandstorm/issues/1798/comments","events_url":"https://api.github.com/repos/sandstorm-io/sandstorm/issues/1798/events","html_url":"https://github.com/sandstorm-io/sandstorm/issues/1798","id":147056540,"number":1798,"title":"OAuth login to disallowed guest account gives no feedback","user":{"login":"kentonv","id":4001805,"avatar_url":"https://avatars.githubusercontent.com/u/4001805?v=3","gravatar_id":"","url":"https://api.github.com/users/kentonv","html_url":"https://github.com/kentonv","followers_url":"https://api.github.com/users/kentonv/followers","following_url":"https://api.github.com/users/kentonv/following{/other_user}","gists_url":"https://api.github.com/users/kentonv/gists{/gist_id}","starred_url":"https://api.github.com/users/kentonv/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/kentonv/subscriptions","organizations_url":"https://api.github.com/users/kentonv/orgs","repos_url":"https://api.github.com/users/kentonv/repos","events_url":"https://api.github.com/users/kentonv/events{/privacy}","received_events_url":"https://api.github.com/users/kentonv/received_events","type":"User","site_admin":false},"labels":[{"url":"https://api.github.com/repos/sandstorm-io/sandstorm/labels/bite-size","name":"bite-size","color":"009800"},{"url":"https://api.github.com/repos/sandstorm-io/sandstorm/labels/bug","name":"bug","color":"fc2929"},{"url":"https://api.github.com/repos/sandstorm-io/sandstorm/labels/self-hosting","name":"self-hosting","color":"bfdadc"}],"state":"open","locked":false,"assignee":null,"milestone":null,"comments":0,"created_at":"2016-04-08T22:37:15Z","updated_at":"2016-04-08T22:37:15Z","closed_at":null,"body":"With Sandstorm for Work, if guest accounts are disabled, then logging in with an identity outside the domain has various results depending on the login type:\r\n\r\n1. Email token login, copy/pasting token: An appropriate error message is displayed in the login form.\r\n2. Email token login, clicking link: Error message claims token is expired.\r\n3. OAuth login: The login has no effect (the user is still logged out), but no error message is shown.\r\n\r\nNote that @jparyani's original implementation would bring the user to an error page in all cases, but I reverted that approach in 9580120a5dbd665b663169ff6004f7c4766c1bd6.\r\n\r\nIdeally, all cases would display an error message inside the login form like case 1 already does currently."}}