Add unmet_authentication_requirements error constant

[Copilot]

Adds the unmet_authentication_requirements error constant as defined in the OpenID Connect Unmet Authentication Requirements specification.

Changes

• Added UnmetAuthenticationRequirements constant to OpenIddictConstants.Errors class with value "unmet_authentication_requirements"

Usage

return Forbid(
    authenticationSchemes: OpenIddictServerAspNetCoreDefaults.AuthenticationScheme,
    properties: new AuthenticationProperties(new Dictionary<string, string>
    {
        [OpenIddictServerAspNetCoreConstants.Properties.Error] = Errors.UnmetAuthenticationRequirements,
        [OpenIddictServerAspNetCoreConstants.Properties.ErrorDescription] = 
            "The end user has not met the authentication requirements."
    }));

Warning

Firewall rules blocked me from connecting to one or more addresses (expand for details)

I tried to connect to the following addresses, but was blocked by firewall rules:

• dlbvsblobprodcus316.vsblob.vsassets.io
  • Triggering command: /usr/bin/dotnet dotnet build src/OpenIddict.Abstractions/OpenIddict.Abstractions.csproj --configuration Release (dns block)
  • Triggering command: /home/REDACTED/work/openiddict-core/openiddict-core/.dotnet/dotnet /home/REDACTED/work/openiddict-core/openiddict-core/.dotnet/dotnet msbuild /m /nologo /clp:Summary /v:minimal /nr:true /warnaserror /p:TreatWarningsAsErrors=true /p:ContinuousIntegrationBuild=false /home/REDACTED/work/openiddict-core/openiddict-core/artifacts/toolset/restore.proj /t:__WriteToolsetLocation /clp:ErrorsOnly;NoSummary /p:__ToolsetLocationOutputFile=/home/REDACTED/work/openiddict-core/openiddict-core/artifacts/toolset/10.0.0-beta.25562.108.txt (dns block)
  • Triggering command: /home/REDACTED/work/openiddict-core/.codeql-scratch/dbs/csharp/working/.dotnet/dotnet /home/REDACTED/work/openiddict-core/.codeql-scratch/dbs/csharp/working/.dotnet/dotnet restore --no-dependencies /home/REDACTED/work/openiddict-core/openiddict-core/OpenIddict.slnx --packages /home/REDACTED/work/openiddict-core/.codeql-scratch/dbs/csharp/working/packages /p:DisableImplicitNuGetFallbackFolder=true --verbosity normal /p:TargetFrameworkRootPath=/home/REDACTED/work/openiddict-core/.codeql-scratch/dbs/csharp/working/emptyFakeDotnetRoot /p:NetCoreTargetingPackRoot=/home/REDACTED/work/openiddict-core/.codeql-scratch/dbs/csharp/working/emptyFakeDotnetRoot /p:AllowMissingPrunePackageData=true /p:EnableWindowsTargeting=true (dns block)
• openid.net
  • Triggering command: /home/REDACTED/work/_temp/ghcca-node/node/bin/node /home/REDACTED/work/_temp/ghcca-node/node/bin/node --enable-source-maps /home/REDACTED/work/_temp/copilot-developer-action-main/dist/index.js (dns block)
• securitytools.pkgs.visualstudio.com
  • Triggering command: /opt/hostedtoolcache/CodeQL/2.24.1/x64/codeql/csharp/tools/linux64/Semmle.Autobuild.CSharp /opt/hostedtoolcache/CodeQL/2.24.1/x64/codeql/csharp/tools/linux64/Semmle.Autobuild.CSharp (dns block)

If you need me to access, download, or install something from one of these locations, you can either:

• Configure Actions setup steps to set up my environment, which run before the firewall is enabled
• Add the appropriate URLs or hosts to the custom allowlist in this repository's Copilot coding agent settings (admins only)

Original prompt

---

This section details on the original issue you should resolve

<issue_title>Add the standard unmet_authentication_requirements error</issue_title>
<issue_description>### Confirm you've already contributed to this project or that you sponsor it

• I confirm I'm a sponsor or a contributor

Describe the solution you'd like

A unmet_authentication_requirements constant should be added under the nested OpenIddictConstants.Errors class.

Additional context

https://openid.net/specs/openid-connect-unmet-authentication-requirements-1_0.html</issue_description>

Comments on the Issue (you are @copilot in this section)

• Fixes Add the standard unmet_authentication_requirements error #2424

---

💡 You can make Copilot smarter by setting up custom instructions, customizing its development environment and configuring Model Context Protocol (MCP) servers. Learn more Copilot coding agent tips in the docs.

[kevinchalet]

Good job, @copilot 😃