diff --git a/access.lua b/access.lua
index 0452e85..bfafa9f 100644
--- a/access.lua
+++ b/access.lua
@@ -257,5 +257,9 @@ end
 
 -- if already authenticated, but still receives a /_oauth request, redirect to the correct destination
 if uri == "/_oauth" then
-  return ngx.redirect(uri_args["state"])
+  if uri_args["state"] then
+    return ngx.redirect(uri_args["state"])
+  else
+    return ngx.redirect("/")
+  end
 end