How can I send the server-side error message or non-401 status codes (e.g. 403, 429) to the client by authorize()?

[tats-u]

We sometime have to send server errors other than "authentication failed".

• Database error
• Account locked
• too many attempts
• IP blocked

However, authenticate() can only do either of:

• Send 401
• Throw runtime error (throwOnError)
• Redirect (failureRedirect)

https://github.com/sergiodxa/remix-auth/blob/a4ea43d67a76490521daa91f066d0117c8d1517d/src/lib/strategy.ts#L124-L127

There's no way to send 422, 403, 429, or 500. json({ ... }, 40x) thrown in the parameter function in FormStrategy constructor is ignored. The format of the JSON payload is fixed with {message: string}.

• If we use failureRedirect, do you recommend using the flash message?
• If we don't want to redirect, how should we deal with the error response? ErrorBoundary?
• How can we customize the JSON payload in the error response? (conform requires the dedicated format of the JSON response)