Probably redirect back to the client to show a clean error message? The other option would be returning raw HTML in the callback response https://git.sc07.company/sc07/canvas/-/blob/8559aea7c3e034ef949f3e942438183dbf3561a7/packages/server/src/api.ts#L25