M masto.go → masto.go

@@ -121,13 +121,15 @@ return
 	}
 
 	if app.Scopes != gotScopes {
-		elog.Println("oauth: bad scopes")
+		elog.Printf("oauth: bad scopes: got %s; want %s", gotScopes, app.Scopes)
 		rw.WriteHeader(http.StatusBadRequest)
+		return
 	}
 
 	if app.RedirectURI != redirectURI {
 		elog.Println("oauth: incorrect redirect URI")
 		rw.WriteHeader(http.StatusBadRequest)
+		return
 	}
 
 	if grantType == "authorization_code" {
@@ -151,6 +153,7 @@ } else {
 		// gaslight the client
 		elog.Println("oauth: bad grant_type: must be authorization_code")
 		rw.WriteHeader(http.StatusBadRequest)
+		return
 	}
 }