Error Handling

Web Server Applications and Installed Applications that implement the Authorization Code grant type to first request an Authorization Code may instead receive an error in the callback, as follows:

<REDIRECT_URUL>?error=<ERROR_CODE>

Here is an example:

https://myapp.com/oauth/callback?error=invalid_client

Any HTTP GET or POST may return Status Code 400 or 401 and a response Body, as follows:

{
  "error": <ERROR_CODE>,
  "error_description": <ERROR_DESCRIPTION>
}

Here is an example:

{
  "error":"invalid_grant",
  "error_description":"Audience validation failed"
}

Possible error codes include:

Error Code	Cause
invalid_client	Either the Client ID or Secret was incorrectly specified. Alternatively, an Installed Application may have attempted to include the Client ID in the Authorization header rather than request body.
invalid_grant	The grant_type was incorrectly specified.
invalid_request	The request has not been formed correctly. Please refer closely to the documentation.