Step 2 (alternative): User denies authorization

post/oauth2/authorize/deny

This operation requires an authentication scheme, Authorization, that can't be read, so its parameters and responses are not shown here. They are in the OpenAPI document.