When a user cancels the login, “interaction_required” error is returned but it must be “access_denied”

Solution Unverified - Updated 2021-06-23T08:50:37+00:00 -

Issue

When the end-user clicks "cancel" in the login form (UsernamePasswordForm catches the "cancel" action), "interaction_required" is sent to the client. But according to the specifications, "access_denied" is suitable.

A Red Hat subscription provides unlimited access to our knowledgebase, tools, and much more.

Here are the common uses of Markdown.

Code blocks

~~~
Code surrounded in tildes is easier to read
~~~

Links/URLs

[Red Hat Customer Portal](https://access.redhat.com)