Authentication and Authorization error callbacks#
Version: 1.0 updated 6/9/2022
Overview of error codes - their meaning and use#
| Error code | Use | HTTP Status code |
|---|---|---|
| invalid_request | IdP returns this error if one of the required parameters is missing in the request (eg nonce, state,…). It is also returned if the value of the parameter is invalid and the request cannot be executed except for exceptions specified by its own error code. See the following error codes. The error can be used even if an unsupported authentication or authorization method is required (for example, a POST and IdP request only supports GET). For status 400, this is an error state without redirect. | 302, 400, see individual elements |
| unauthorized_client | If it is not possible to issue an authentication result for the given client and used grant variant. For code_grant flow without session management, eg in case of using invalid client_id. Error state without redirect. | 400 |
| access_denied | Returns when authentication or authorization has not been completed based on a user action. Individual cases: authentication incomplete by the end user or consent page rejected by the end user or authorization incomplete by the end user. | 302 |