fix: return HTTP 400 instead of 500 for bad query parameters

ory · Jun 21, 2023 · 58258eb · 58258eb
1 parent eac908c
commit 58258eb
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/x/http_secure_redirect.go b/x/http_secure_redirect.go
@@ -125,7 +125,7 @@ func SecureRedirectTo(r *http.Request, defaultReturnTo *url.URL, opts ...SecureR
 
 	returnTo, err = url.Parse(rawReturnTo)
 	if err != nil {
-		return nil, errors.WithStack(herodot.ErrInternalServerError.WithWrap(err).WithReasonf("Unable to parse the return_to query parameter as an URL: %s", err))
+		return nil, errors.WithStack(herodot.ErrBadRequest.WithWrap(err).WithReasonf("Unable to parse the return_to query parameter as an URL: %s", err))
 	}
 
 	returnTo.Host = stringsx.Coalesce(returnTo.Host, o.defaultReturnTo.Host)