.github/CODEOWNERS

@@ -1 +1 @@
-*	@auth0/dx-sdks-engineer
+*	@auth0/project-dx-sdks-engineer-codeowner

.github/workflows/semgrep.yml

@@ -2,7 +2,7 @@ name: Semgrep
 
 on:
   merge_group:
-  pull_request_target:
+  pull_request:
     types:
       - opened
       - synchronize
@@ -20,16 +20,7 @@ concurrency:
   cancel-in-progress: ${{ github.ref != 'refs/heads/5.x' }}
 
 jobs:
-  authorize:
-    name: Authorize
-    environment: ${{ github.actor != 'dependabot[bot]' && github.event_name == 'pull_request_target' && github.event.pull_request.head.repo.full_name != github.repository && 'external' || 'internal' }}
-    runs-on: ubuntu-latest
-    steps:
-      - run: true
-
   check:
-    needs: authorize
-
     name: Check for Vulnerabilities
     runs-on: ubuntu-latest
 

.version

@@ -1 +1 @@
-5.2.0
+5.2.1

src/Actions/Authentication.php

@@ -41,6 +41,7 @@ final class Authentication extends Base
 
         'login_form_logout' => 'onLogout',
         'auth0_logout' => 'onLogout',
+        'auth0_token_exchange_failed' => 'onExchangeFailed',
 
         'before_signup_header' => 'onRegistration',
 
@@ -495,8 +496,8 @@ public function onLogin(): void
                 } catch (Throwable) {
                 }
 
-                wp_redirect('/');
-                exit;
+                do_action('auth0_token_exchange_failed', $throwable);
+                return;
             }
 
             $session = $this->getSdk()
@@ -549,6 +550,13 @@ public function onLogin(): void
         exit;
     }
 
+    public function onExchangeFailed(Throwable $_)
+    {
+        // Custom hook ('auth0_token_exchange_failed') to register when token exchange fails.
+        wp_redirect('/');
+        exit;
+    }
+
     public function onLogout(): never
     {
         wp_logout();