Auth errors & troubleshooting
Common Auth integration mistakes.
- invalid_client — wrong api_key/secret or OAuth client not provisioned; recreate app or contact support.
- INVALID_REDIRECT_URI — callback not listed on the application.
- PKCE_REQUIRED — send code_challenge and code_challenge_method=S256 if enabled on the app.
- INVALID_GRANT — expired or reused authorization code; codes are single-use.
- PROVIDER_DISABLED — enable the sign-in method in Providers.
API responses use { success, data } or { success: false, error: { code, message } }.