display OIDC error message

web/biome.json

@@ -10,7 +10,7 @@
     "includes": [
       "src/**",
       "!src/messages",
-      "!src/paraglide/**/*.js",
+      "!src/paraglide/**",
       "!src/routeTree.gen.ts"
     ]
   },

web/messages/en.json

@@ -106,6 +106,7 @@
   "openid_mfa_redirect_error_missing_args": "Missing code or state in the callback's URL. The provider might not be configured correctly.",
   "openid_mfa_complete_title": "Authentication Completed",
   "openid_mfa_complete_subtitle": "You have been successfully authenticated. Please close this window and get back to the Defguard VPN Client",
+  "openid_generic_error": "OpenID authentication error",
   "open_desktop_title": "Open the desktop app to continue",
   "open_desktop_description": "We tried to open the desktop app automatically, but it didn't respond. This can happen if the browser blocks the request or the app didn't start in time.",
   "open_desktop_button": "Open desktop app",

web/src/routes/openid/callback.tsx

@@ -1,7 +1,9 @@
 import { createFileRoute, redirect } from '@tanstack/react-router';
 import z from 'zod';
+import { m } from '../../paraglide/messages';
 import { api } from '../../shared/api/api';
 import { useEnrollmentStore } from '../../shared/hooks/useEnrollmentStore';
+import { useOpenidStore } from '../../shared/hooks/useOpenIdStore';
 
 const schema = z.object({
   state: z.string().trim().min(1),
@@ -26,8 +28,10 @@ export const Route = createFileRoute('/openid/callback')({
         },
       })
       .catch((e) => {
-        console.error(e);
-        throw redirect({ to: '/enrollment-start', replace: true });
+        useOpenidStore.setState({
+          error: e.response?.data?.error ?? m.openid_generic_error(),
+        });
+        throw redirect({ to: '/openid/error', replace: true });
       });
     const enrollmentStartResponse = await api.enrollment.start
       .callbackFn({