challenger

commit fd4caf1e0521ed0b9c39f0ead6dddc5a29ec8daa
parent 121a8a18a8981f537e98cd5c24dd59b45b1d8618
Author: Christian Grothoff <grothoff@gnunet.org>
Date:   Wed, 15 Jul 2026 23:40:19 +0200

return correct HTTP status codes as per spec

Diffstat:
M
src/challenger/challenger-httpd_token.c
 | 
6
+++---

1 file changed, 3 insertions(+), 3 deletions(-)
diff --git a/src/challenger/challenger-httpd_token.c b/src/challenger/challenger-httpd_token.c
@@ -464,7 +464,7 @@ CH_handler_token (struct CH_HandlerContext *hc,
         GNUNET_break_op (0);
         return CH_reply_with_oauth_error (
           hc->connection,
-          MHD_HTTP_UNAUTHORIZED,
+          MHD_HTTP_BAD_REQUEST,
           "invalid_grant",
           TALER_EC_CHALLENGER_GENERIC_VALIDATION_UNKNOWN,
           "validation_get_pkce");
@@ -515,7 +515,7 @@ CH_handler_token (struct CH_HandlerContext *hc,
         GNUNET_free (code_challenge);
         return CH_reply_with_oauth_error (
           hc->connection,
-          MHD_HTTP_UNAUTHORIZED,
+          MHD_HTTP_BAD_REQUEST,
           "invalid_grant",
           TALER_EC_GENERIC_PARAMETER_MISSING,
           "code_verifier is missing");
@@ -755,7 +755,7 @@ CH_handler_token (struct CH_HandlerContext *hc,
         GNUNET_break (0);
         return CH_reply_with_oauth_error (
           hc->connection,
-          MHD_HTTP_UNAUTHORIZED,
+          MHD_HTTP_BAD_REQUEST,
           "invalid_grant",
           TALER_EC_CHALLENGER_GRANT_UNKNOWN,
           "token_add_token");