OpenPass error code reference

Did you receive an error code from the API or an error page? This table lists common error codes and recommends possible solutions to get your integration working again.

HTTP Status Code Error Code Error Description Possible Solution
400 access_denied You are not allowed to redirect to that URI: Redirect URI not recognized. Make sure the redirect URI you are using is allowed in the application settings on the OpenPass self-service portal. For details, see Redirect URIs.
400 access_denied SPA application type required when using Post Message response mode. If you are using the post_message (popup) flow, make sure you configured your application type as a single-page application (SPA) in the OpenPass self-service portal. If the application is not configured as SPA, recreate it using the SPA type. For details on configuring your application, see Account setup.
400 access_denied You are not allowed to redirect to that URI: Invalid schema for Native applications. Add myopenpass.auth. to the beginning of the redirect URI schema.
400 invalid_client Could not find client for supplied ID. Make sure the application client ID is correct and matches your application's ID in the OpenPass self-service portal. For details on configuring your application, see Account setup.
400 invalid_grant The code_verifier did not match the code_challenge sent in the original authorize request. When using Proof Key for Code Exchange (PKCE), which is enabled by default for OpenPass applications, make sure the plain text code_verifier parameter matches the SHA256-hashed code_challenge parameter provided in the authorize call. If you are not using SHA256, match both of these parameters using plain text. For details on PKCE, see PKCE. To learn more about its security parameters, see Prepare security parameters.
400 invalid_request Unsupported response_type, expecting code. For the /v1/api/authorize endpoint, use only the code response type. For details on authorize endpoint parameters, see Generate and navigate to the authorize URL.
400 invalid_scope Invalid scope, expecting openid. To conform with OpenID specifications, for the scope parameter, enter openid. For details on authorize endpoint parameters, see Generate and navigate to the authorize URL.
500 server_error Unknown error. An unexpected error occurred. This is usually a temporary failure or an implementation bug. Try again. If the issue persists, contact support@myopenpass.com for assistance.