# Unsupported response type: ZhAk

**URL:** <https://community.auth0.com/t/unsupported-response-type-zhak/176222>\
**Category:** Get Help\
**Tags:** google-social-connection, connections\
**Created:** [January 30, 2025, 11:52am UTC](https://community.auth0.com/t/unsupported-response-type-zhak/176222 "2025-01-30T11:52:07Z")\
**Posts on this page:** 4\
**Page:** 1

<div class="post-metadata">

**Author:** ![tomas.sequeira](https://sea1.discourse-cdn.com/auth0/user_avatar/community.auth0.com/tomas.sequeira/32/71384_2.png) [@tomas.sequeira](https://community.auth0.com/u/tomas.sequeira)\
**Post date:** [January 30, 2025, 11:52am UTC](https://community.auth0.com/t/unsupported-response-type-zhak/176222/1 "2025-01-30T11:52:07Z")

</div>

Hello everyone,

I have been able to successfully log most users using Auth0 but this morning I got this error:

```auto
    "error": {
      "message": "Unsupported response type: ZhAk",
      "oauthError": "unsupported_response_type",
      "type": "oauth-authorization"
    }

```

It only happened for a specific user so far and I haven’t been able to find info on why it happened or how to fix it. Does anyone know anything about this? There’s a topic from 2022 with the same problem reported but still no response to date.

Thanks

---

<div class="post-metadata">

**Author:** ![dawid.matuszczyk](https://sea1.discourse-cdn.com/auth0/user_avatar/community.auth0.com/dawid.matuszczyk/32/74550_2.png) [@dawid.matuszczyk](https://community.auth0.com/u/dawid.matuszczyk)\
**Post date:** [January 30, 2025, 12:46pm UTC](https://community.auth0.com/t/unsupported-response-type-zhak/176222/2 "2025-01-30T12:46:07Z")

</div>

Hi @tomas.sequeira

Welcome to the Auth0 Community!

I’ve checked your tenant log, and it looks like an automated bot attempted or hack attempt. In the qs object, you can see all the parameters that this person or bot used. One of them is “response\_type”: “ZhAk” and that’s why the “Unsupported response type: ZhAk” error is triggered. You can read information about this specific parameter here: [OAuth 2.0 Authorization Framework](https://auth0.com/docs/authenticate/protocols/oauth). Please check the user’s device for malware.

Additional informations: [Censys scanner causing error logs: "Missing required parameter: response\_type"](https://community.auth0.com/t/censys-scanner-causing-error-logs-missing-required-parameter-response-type/91341?preview_theme_id=38)

Thanks  
Dawid

---

<div class="post-metadata">

**Author:** ![tomas.sequeira](https://sea1.discourse-cdn.com/auth0/user_avatar/community.auth0.com/tomas.sequeira/32/71384_2.png) [@tomas.sequeira](https://community.auth0.com/u/tomas.sequeira)\
**Post date:** [February 4, 2025, 6:31pm UTC](https://community.auth0.com/t/unsupported-response-type-zhak/176222/3 "2025-02-04T18:31:51Z")

</div>

Thanks for the answer Dawid. Unfortunately, more than one person already reported this error and we know for sure that they aren’t “hackers or bots” since one of them is a relative of mine. Is it possible that there’s still something strange happening?

Thanks.

---

<div class="post-metadata">

**Author:** ![system](https://global.discourse-cdn.com/auth0/original/3X/b/5/b560f266932fcce5d57f09a6595bd50518cae3f3.jpeg) [@system](https://community.auth0.com/u/system)\
**Post date:** [February 18, 2025, 6:32pm UTC](https://community.auth0.com/t/unsupported-response-type-zhak/176222/4 "2025-02-18T18:32:19Z")

</div>

This topic was automatically closed 14 days after the last reply. New replies are no longer allowed.