Fixes up user rejection cases.

1 files changed, 5 insertions, 2 deletions

diff --git a/samples/OAuth2ProtectedWebApi/Controllers/UserController.cs b/samples/OAuth2ProtectedWebApi/Controllers/UserController.cs
index 3e673c5..e627dc2 100644
--- a/samples/OAuth2ProtectedWebApi/Controllers/UserController.cs
+++ b/samples/OAuth2ProtectedWebApi/Controllers/UserController.cs
@@ -34,10 +34,13 @@
 			var authRequest = await authServer.ReadAuthorizationRequestAsync(new Uri(request));
 			IProtocolMessage responseMessage;
 			if (approval) {
-				responseMessage = authServer.PrepareApproveAuthorizationRequest(
+				var grantedResponse = authServer.PrepareApproveAuthorizationRequest(
 					authRequest, this.User.Identity.Name, authRequest.Scope);
+				responseMessage = grantedResponse;
 			} else {
-				responseMessage = authServer.PrepareRejectAuthorizationRequest(authRequest);
+				var rejectionResponse = authServer.PrepareRejectAuthorizationRequest(authRequest);
+				rejectionResponse.Error = Protocol.EndUserAuthorizationRequestErrorCodes.AccessDenied;
+				responseMessage = rejectionResponse;
 			}
 
 			var response = await authServer.Channel.PrepareResponseAsync(responseMessage);