invalid_request

Source: Hydra (RFC 6749)

HTTP: 400

Summary

OAuth2 request is missing or has malformed parameters.

When this fires

Common with bad authorize/token requests.

Common causes

• Missing client_id
• Missing redirect_uri
• Missing PKCE challenge for public client

Fix

Check the request parameters. See Troubleshooting, pkce_required for the PKCE case.

Source code

Generated from the platform's error catalog. To find emit sites: grep -r "invalid_request" ../<repo>/src.