ReferenceError catalog
Error catalog (detail)
17 known error codes — Dashboard, Kratos, Hydra, SDK, OAuth2
Every known error code emitted by Ionize and its components, with what causes it and how to fix.
By source
Dashboard
| Code | HTTP | Summary |
|---|---|---|
not_authenticated | 401 | Session cookie missing or invalid. |
forbidden | 403 | Session is valid but role is insufficient. |
bad_content_type | 415 | Mutation routes require Content-Type: application/json. |
Hydra (Ionize enforcement)
| Code | HTTP | Summary |
|---|---|---|
pkce_required | 400 | PKCE is mandatory for this client. |
Hydra (RFC 6749)
| Code | HTTP | Summary |
|---|---|---|
invalid_request | 400 | OAuth2 request is missing or has malformed parameters. |
invalid_client | 401 | Client authentication failed. |
invalid_grant | 400 | Authorization grant is invalid, expired, revoked, or doesn't match the redirect_uri. |
unauthorized_client | 400 | Client not authorized to use this grant type. |
unsupported_grant_type | 400 | Grant type not supported by the server. |
invalid_scope | 400 | Requested scope is invalid or unknown. |
Kratos
| Code | HTTP | Summary |
|---|---|---|
self_service_flow_expired | 410 | Self-service flow has exceeded its TTL. |
security_csrf_violation | 400 | CSRF token mismatch. |
session_aal2_required | 403 | Session AAL is too low for the requested operation. |
invalid_credentials | 400 | Login credentials are invalid. |
SDK
| Code | HTTP | Summary |
|---|---|---|
encryption_key_not_set | 500 | ENCRYPTION_KEY env var is not set. |
encryption_key_blocklisted | 500 | ENCRYPTION_KEY is on the blocklist of known-weak values. |
cipher_decrypt_fail | 500 | Decryption of an encrypted setting failed. |