--- a/mod_http_oauth2/mod_http_oauth2.lua	Tue May 02 16:07:09 2023 +0200
+++ b/mod_http_oauth2/mod_http_oauth2.lua	Tue May 02 16:08:35 2023 +0200
@@ -963,6 +963,13 @@
 						return "authorization_code"
 					end
 				end);
+				response_modes_supported = array(it.keys(response_type_handlers)):map(function(h)
+					if h == "token" then
+						return "fragment"
+					elseif h == "code" then
+						return "query"
+					end
+				end);
 				authorization_response_iss_parameter_supported = true;
 
 				-- OpenID