Hey @Josenzo, thanks for reaching out!
Hmm, I've taken a look and it seems that this is expected behaviour.
"If the user grants access, the final URL will contain a hash fragment with the following data encoded as a query string. For example:
Note: a query string will be returned when the user denies access.
Check this out for more information: https://developer.spotify.com/documentation/general/guides/authorization-guide/#1-have-your-applicat...
Let me know if you have any questions! 🙂
Have a good one,
Help others find this answer and click "Accept as Solution".
If you appreciate my answer, maybe give me a Like.
Note: I'm not a Spotify employee.