diff --git a/backend/internal/dto/validations.go b/backend/internal/dto/validations.go
index 0b92da81..fb40e219 100644
--- a/backend/internal/dto/validations.go
+++ b/backend/internal/dto/validations.go
@@ -76,14 +76,13 @@ func ValidateCallbackURL(raw string) bool {
 }
 
 // ValidateResponseMode validates response_mode parameter
-// If responseMode is present, it must be "form_post"
-// Empty responseMode is allowed (will use default behavior)
+// If responseMode is present, it must be "form_post" or "query"
+// Empty responseMode is allowed (field not provided, use default)
 func ValidateResponseMode(responseMode string) bool {
 	switch responseMode {
-	case  "form_post":
+	case  "form_post", "query":
 		return true
 	case "":
-		// Empty responseMode is allowed (field not provided, use default)
 		return true
 	default:
 		return false
diff --git a/backend/internal/dto/validations_test.go b/backend/internal/dto/validations_test.go
index c360ef11..ec52b53e 100644
--- a/backend/internal/dto/validations_test.go
+++ b/backend/internal/dto/validations_test.go
@@ -64,7 +64,7 @@ func TestValidateResponseMode(t *testing.T) {
 		expected bool
 	}{
 		{"valid form_post", "form_post", true},
-		{"invalid query", "query", false},
+		{"valid query", "query", true},
 		{"valid empty", "", true},
 		{"invalid fragment", "fragment", false},
 	}