The current API returns NestJS HTTP error objects.
The OAuth endpoints use the standard error and optional error_description fields for OAuth protocol errors.