Test

Author: GitTimeraider

app/routes.py

@@ -1067,8 +1067,14 @@ def oidc_callback():
             current_app.logger.info(f"Token response body: {token_response.text}")
 
             if token_response.status_code != 200:
-                current_app.logger.error(f"Token endpoint returned {token_response.status_code}: {token_response.text}")
-                flash(f'Failed to obtain access token: {token_response.text}', 'error')
+                error_msg = token_response.text
+                current_app.logger.error(f"Token endpoint returned {token_response.status_code}: {error_msg}")
+                
+                # Check for ban message
+                if 'banned' in error_msg.lower():
+                    flash('Your application has been banned by the identity provider. Please contact your administrator.', 'error')
+                else:
+                    flash(f'Failed to obtain access token: {error_msg}', 'error')
                 return redirect(url_for('main.login'))
 
             token = token_response.json()