api connect/token 使用本地化错误提示

[wuchang]

Is there an existing issue for this?

• I have searched the existing issues

Is your feature request related to a problem? Please describe the problem.

目前 api connect/token 认证出错时，返回的内容都是固定的英文内容如 "Invalid username or password!",
希望能输出本地化的内容

Describe the solution you'd like

TokenController.Password.cs 在这个文件源码，重复三次字符串 "Invalid username or password!"
而且是硬编码，没有办法通过资源文件改为本地化内容，
api 返回 如：

{
  "error": "account_locked",
  "error_description": "The user account has been locked out due to invalid login attempts. Please wait a while and try again.",
  "error_uri": "https://documentation.openiddict.com/errors/ID2024"
}

{
  "error": "invalid_grant",
  "error_description": "Invalid username or password!",
  "error_uri": "https://documentation.openiddict.com/errors/ID2024"
}

Additional context

No response

[maliming]

This is by design — the error_description returned from the connect/token endpoint isn't localized on purpose.

Per RFC 6749, error_description is meant to help the client developer understand what went wrong, not to be shown to end users directly. OpenIddict doesn't localize these messages either. Kevin (OpenIddict's author) explained the reasoning here: #17411 (comment)

If you want localized text on the login UI, map the machine-readable error code to your own localized messages instead of relying on error_description. The codes already tell the cases apart — e.g. invalid_grant, account_locked, account_inactive.

Duplicate of #17411.