package oidc import ( "fmt" "html" ) // successHTML/errorHTML are served back to the browser tab, never to // stdout/stderr or any log — the request they respond to may still carry // the authorization code in its query string. func successHTML() []byte { return []byte(`vault-tui

Signed in

You can close this tab and return to vault-tui.

`) } func errorHTML(err error) []byte { msg := html.EscapeString(err.Error()) return []byte(fmt.Sprintf(`vault-tui

Sign-in failed

%s

Return to vault-tui and try again.

`, msg)) }