From 3d491e0fe065da9c68cbdc227d2b42a022a823dd Mon Sep 17 00:00:00 2001
From: John van der Wulp <john@wulp.org>
Date: Thu, 5 Mar 2026 16:46:11 +0100
Subject: [PATCH] There is no query...

---
 backend/internal/dto/validations.go      | 6 +++---
 backend/internal/dto/validations_test.go | 2 +-
 2 files changed, 4 insertions(+), 4 deletions(-)

diff --git a/backend/internal/dto/validations.go b/backend/internal/dto/validations.go
index c7491f97..de083aec 100644
--- a/backend/internal/dto/validations.go
+++ b/backend/internal/dto/validations.go
@@ -76,13 +76,13 @@ func ValidateCallbackURL(raw string) bool {
 }
 
 // ValidateResponseMode validates response_mode parameter
-// If responseMode is present, it must be either "form_post" or "query"
+// If responseMode is present, it must be "form_post"
 // Empty responseMode is allowed (will use default behavior)
 func ValidateResponseMode(responseMode string) bool {
 	// Empty responseMode is allowed (field not provided, use default)
 	if responseMode == "" {
 		return true
 	}
-	// If present, it must be form_post or query
-	return responseMode == "form_post" || responseMode == "query"
+	// If present, it must be form_post
+	return responseMode == "form_post"
 }
diff --git a/backend/internal/dto/validations_test.go b/backend/internal/dto/validations_test.go
index ec52b53e..c360ef11 100644
--- a/backend/internal/dto/validations_test.go
+++ b/backend/internal/dto/validations_test.go
@@ -64,7 +64,7 @@ func TestValidateResponseMode(t *testing.T) {
 		expected bool
 	}{
 		{"valid form_post", "form_post", true},
-		{"valid query", "query", true},
+		{"invalid query", "query", false},
 		{"valid empty", "", true},
 		{"invalid fragment", "fragment", false},
 	}