diff --git a/auth/oidc.go b/auth/oidc.go
index 14e6a5e1..02847568 100644
--- a/auth/oidc.go
+++ b/auth/oidc.go
@@ -124,8 +124,8 @@ func (o *OAuthClient) HandleAuthCallback(r *http.Request, usr users.Store, srv *
 	var claims struct {
 		Username string `json:"preferred_username"`
 	}
-	if err := idToken.Claims(&claims); err != nil {
-		log.Printf("oidc extract claims failed: %s", err)
+	if errClaims := idToken.Claims(&claims); errClaims != nil {
+		log.Printf("oidc extract claims failed: %s", errClaims)
 		return nil, os.ErrPermission
 	}