Class OidcConstants.Errors
- Namespace
- Fdyay.IdentityServer
- Assembly
- Fdyay.IdentityServer.Core.dll
OAuth 2.0 authorization and token error codes (RFC 6749).
public static class OidcConstants.Errors- Inheritance
-
OidcConstants.Errors
- Inherited Members
Fields
AccessDenied
RFC 6749 §4.1.2.1: the user or the server denied the request.
public const string AccessDenied = "access_denied"Field Value
AccountSelectionRequired
OIDC Core §3.1.2.6: the user has to choose an account and cannot be asked to.
public const string AccountSelectionRequired = "account_selection_required"Field Value
AuthorizationPending
RFC 8628 §3.5: the user has not finished approving yet, so the device should keep polling.
public const string AuthorizationPending = "authorization_pending"Field Value
ConsentRequired
OpenID Connect Core 1.0 §3.1.2.6: the request needs the user's consent, and prompt=none forbade
asking.
public const string ConsentRequired = "consent_required"Field Value
ExpiredLoginHintToken
CIBA Core §13: the login_hint_token has expired.
public const string ExpiredLoginHintToken = "expired_login_hint_token"Field Value
Remarks
Measured from Duende 8.0.1's backchannel request validator, which passes it through from the user validator.
ExpiredToken
RFC 8628 §3.5: the device code is past its lifetime and the device must start over.
public const string ExpiredToken = "expired_token"Field Value
InteractionRequired
OpenID Connect Core 1.0 §3.1.2.6: the request needs the user to interact, and prompt=none forbade it.
public const string InteractionRequired = "interaction_required"Field Value
InvalidBindingMessage
CIBA Core §13: the binding message is not something a person could be asked to compare.
public const string InvalidBindingMessage = "invalid_binding_message"Field Value
InvalidClient
RFC 6749 §5.2: client authentication failed.
public const string InvalidClient = "invalid_client"Field Value
InvalidDPoPProof
RFC 9449 §5: the DPoP proof was missing, malformed, untimely, replayed, or not for this request.
public const string InvalidDPoPProof = "invalid_dpop_proof"Field Value
InvalidGrant
RFC 6749 §5.2: the code, refresh token or other grant is invalid, expired, revoked, or was issued to another client.
public const string InvalidGrant = "invalid_grant"Field Value
InvalidRequest
RFC 6749 §4.1.2.1 and §5.2: the request is missing a parameter, repeats one, or is otherwise malformed.
public const string InvalidRequest = "invalid_request"Field Value
InvalidRequestObject
RFC 9101: the request object could not be read, verified, or trusted.
public const string InvalidRequestObject = "invalid_request_object"Field Value
InvalidRequestUri
RFC 9126 §2.3: the presented request_uri is unknown, expired, or already redeemed.
public const string InvalidRequestUri = "invalid_request_uri"Field Value
InvalidScope
RFC 6749 §4.1.2.1 and §5.2: a requested scope is invalid, unknown, or not allowed for the client.
public const string InvalidScope = "invalid_scope"Field Value
InvalidTarget
RFC 8707 §2: the resource indicator is malformed, unknown, or not one this grant can reach.
public const string InvalidTarget = "invalid_target"Field Value
Remarks
Measured from the Duende.IdentityModel 8.0.1 package, as the CIBA codes beside it were.
InvalidUserCode
CIBA Core §13: the user code is not this user's.
public const string InvalidUserCode = "invalid_user_code"Field Value
LoginRequired
OpenID Connect Core 1.0 §3.1.2.6: the request needs the user to sign in, and prompt=none forbade it.
public const string LoginRequired = "login_required"Field Value
MissingUserCode
CIBA Core §13: this user's requests must carry a user code, and this one did not.
public const string MissingUserCode = "missing_user_code"Field Value
Remarks
This and InvalidUserCode were measured from the Duende.IdentityModel 8.0.1 package
rather than written from memory of the specification, whose host this environment cannot reach.
RequestNotSupported
RFC 9101: this server does not accept request objects by value.
public const string RequestNotSupported = "request_not_supported"Field Value
RequestUriNotSupported
RFC 9101: this server does not fetch request objects from a URL.
public const string RequestUriNotSupported = "request_uri_not_supported"Field Value
ServerError
RFC 6749 §4.1.2.1: the server met an unexpected condition.
public const string ServerError = "server_error"Field Value
SlowDown
RFC 8628 §3.5: the device is polling faster than the interval and must back off.
public const string SlowDown = "slow_down"Field Value
TemporarilyUnavailable
RFC 6749 §4.1.2.1: the server cannot handle the request just now.
public const string TemporarilyUnavailable = "temporarily_unavailable"Field Value
UnauthorizedClient
RFC 6749 §4.1.2.1 and §5.2: the client is not allowed to use this grant or response type.
public const string UnauthorizedClient = "unauthorized_client"Field Value
UnknownUserId
CIBA Core §13: the hints in a backchannel request identify nobody this server knows.
public const string UnknownUserId = "unknown_user_id"Field Value
UnmetAuthenticationRequirements
OpenID Connect Core errata: the authentication the request asked for could not be met. Duende's.
public const string UnmetAuthenticationRequirements = "unmet_authentication_requirements"Field Value
UnsupportedGrantType
RFC 6749 §5.2: the server does not support the grant type.
public const string UnsupportedGrantType = "unsupported_grant_type"Field Value
UnsupportedResponseType
RFC 6749 §4.1.2.1: the server does not support the response type.
public const string UnsupportedResponseType = "unsupported_response_type"Field Value
UnsupportedTokenType
RFC 7009 §2.2.1: the revocation request named a kind of token this server does not revoke.
public const string UnsupportedTokenType = "unsupported_token_type"Field Value
UseDPoPNonce
RFC 9449 §8: sign the nonce in the DPoP-Nonce header into the next proof.
public const string UseDPoPNonce = "use_dpop_nonce"