From d03a43335e78852af68d4b73b182109e83477525 Mon Sep 17 00:00:00 2001
From: Mike O <momokatte@hotmail.com>
Date: Fri, 19 Jul 2019 18:54:22 -0700
Subject: [PATCH] Return HTTP 400 for invalid state parameter

---
 server/handlers.go | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/server/handlers.go b/server/handlers.go
index 39b98423..5f46dcc3 100644
--- a/server/handlers.go
+++ b/server/handlers.go
@@ -417,7 +417,7 @@ func (s *Server) handleConnectorCallback(w http.ResponseWriter, r *http.Request)
 	if err != nil {
 		if err == storage.ErrNotFound {
 			s.logger.Errorf("Invalid 'state' parameter provided: %v", err)
-			s.renderError(w, http.StatusInternalServerError, "Requested resource does not exist.")
+			s.renderError(w, http.StatusBadRequest, "Requested resource does not exist.")
 			return
 		}
 		s.logger.Errorf("Failed to get auth request: %v", err)