Internal server error when OAuth2 login request gets denied

[haslersn]

Description

When using ORY Hydra as an OAuth2 provider and an OAuth2 login request gets denied, it redirects back to an URL of the form:

https://hedgedoc.example.com/auth/oauth2/callback?error=login+request+denied&error_description=login+has+been+cancelled&state=redacted

This results in an internal server error.

Steps to reproduce

Go to any HedgeDoc instance where OAuth2 login is enabled and append the path /auth/oauth2/callback?error=login+request+denied&error_description=login+has+been+cancelled&state=redacted.

Expected behaviour

The error should be shown to the user. If an error_description is given, then that should be shown to the user instead.

Logs

No response

Config

No response

Your Setup

• HedgeDoc version: 1.9.8

Additional context

No response