Corpland ID

Errors

Every error code Corpland ID returns and what your app should do about it.

Errors are { "message": "...", "code": "..." }. Show message to people when it helps; branch on code in your code. Messages are written in plain language and may change; codes do not.

OAuth

CodeStatusWhenWhat to do
invalid_client404Unknown client_idCheck your config and registration
invalid_redirect_uri400Callback or post logout address not registeredRegister it with registerClient.js
invalid_request400Missing state or PKCE challengeSend both, method S256
invalid_grant400Code expired, used, or for another client; wrong verifier; refresh token endedStart sign in again
token_reused400An old refresh token came back after the 10 second graceTreat as signed out and start sign in again
unsupported_grant_type400Anything other than authorization_code or refresh_tokenFix the request
venture_forbidden403The venture picked is not one the person belongs toAsk them to pick again
account_unavailable403The Corpland ID was deletedSign the person out
TOO_MANY_REQUESTS429Rate limit on token, authorize, sign in or code requestsBack off and retry later

Ventures

CodeWhen
VENTURE_NOT_FOUNDNo such venture, or it was deleted
NOT_A_MEMBERYou are not an active member
FORBIDDEN_CAPABILITYYour role cannot do this
OWNER_ONLYOnly the owner can do this
LAST_OWNERThe owner tried to leave; transfer first
ALREADY_MEMBERThe invited email already belongs to a member
INVALID_ROLERole must be admin or member
INVITE_NOT_FOUNDThe invitation link is not valid
INVITE_EXPIREDThe invitation expired; ask for it again
INVITE_EMAIL_MISMATCHSigned in with a different email than the one invited
INVITE_CLOSEDAlready accepted, declined or cancelled
TRANSFER_TARGET_INVALIDThe new owner must be an existing admin
SLUG_TAKENAnother venture uses that handle
SELF_ACTIONYou cannot change or remove yourself this way

On this page