From d83c9e12a5e3f8e44aaae3c9cac969e007a23487 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Tim=20M=C3=B6hlmann?= <tim+github@zitadel.com>
Date: Wed, 13 Mar 2024 13:55:56 +0200
Subject: [PATCH] add invalid target error

---
 pkg/oidc/error.go | 13 +++++++++++++
 1 file changed, 13 insertions(+)

diff --git a/pkg/oidc/error.go b/pkg/oidc/error.go
index 86f8724..2f0572d 100644
--- a/pkg/oidc/error.go
+++ b/pkg/oidc/error.go
@@ -27,6 +27,11 @@ const (
 	SlowDown             errorType = "slow_down"
 	AccessDenied         errorType = "access_denied"
 	ExpiredToken         errorType = "expired_token"
+
+	// InvalidTarget error is returned by Token Exchange if
+	// the requested target or audience is invalid.
+	// [RFC 8693, Section 2.2.2: Error Response](https://www.rfc-editor.org/rfc/rfc8693#section-2.2.2)
+	InvalidTarget errorType = "invalid_target"
 )
 
 var (
@@ -112,6 +117,14 @@ var (
 			Description: "The \"device_code\" has expired.",
 		}
 	}
+
+	// Token exchange error
+	ErrInvalidTarget = func() *Error {
+		return &Error{
+			ErrorType:   InvalidTarget,
+			Description: "The requested audience or target is invalid.",
+		}
+	}
 )
 
 type Error struct {