From 00232865fab1a5b2dbfcefcf4f5dd26401ac9ca5 Mon Sep 17 00:00:00 2001
From: Nic Cope <negz@planet.com>
Date: Mon, 12 Mar 2018 01:18:25 -0700
Subject: [PATCH] Provide more context when authentication errors occur

---
 frontend/src/kuberos.vue | 2 +-
 kuberos.go               | 2 +-
 2 files changed, 2 insertions(+), 2 deletions(-)

diff --git a/frontend/src/kuberos.vue b/frontend/src/kuberos.vue
index 517e3cf..f075689 100644
--- a/frontend/src/kuberos.vue
+++ b/frontend/src/kuberos.vue
@@ -1,7 +1,7 @@
 <template>
   <div id="kuberos">
     <b-alert v-if="error" show variant="danger">
-      <p>Could not connect to authentication API: {{error.response.status}} {{error.response.statusText}}</p>
+      <p>Authentication failed: {{error.response.status}} {{error.response.statusText}}: {{error.response.data}}</p>
     </b-alert>
     <b-container v-else fluid>
       <b-row><br /></b-row>
diff --git a/kuberos.go b/kuberos.go
index 778448a..fc48e22 100644
--- a/kuberos.go
+++ b/kuberos.go
@@ -54,7 +54,7 @@ var (
 	ErrInvalidKubeCfgEndpoint = errors.New("invalid redirect endpoint")
 
 	// ErrInvalidState indicates the provided state param was not as expected.
-	ErrInvalidState = errors.New("invalid state parameter")
+	ErrInvalidState = errors.New("invalid state parameter: user agent or IP address changed between requests")
 
 	// ErrMissingCode indicates a response without an OAuth 2.0 authorization
 	// code