According to [RFC
6749](https://datatracker.ietf.org/doc/html/rfc6749#section-4.1.2.1),
when the resource owner or authorization server denied an request, an
`access_denied` error should be returned. But currently in this case
Gitea does not return any error.
For example, if the user clicks "Cancel" here, an `access_denied` error
should be returned.
<img width="360px"
src="
|
||
---|---|---|
.. | ||
auth | ||
dashboard | ||
notification | ||
overview | ||
settings | ||
code.tmpl | ||
heatmap.tmpl | ||
profile.tmpl |