Olympus Docs
ReferenceError catalog

Error catalog (detail)

17 known error codes, Athena, Kratos, Hydra, SDK, OAuth2

Every known error code emitted by Olympus and its components, with what causes it and how to fix.

By source

Athena

CodeHTTPSummary
not_authenticated401Session cookie missing or invalid.
forbidden403Session is valid but role is insufficient.
bad_content_type415Mutation routes require Content-Type: application/json.

Hydra (Olympus enforcement)

CodeHTTPSummary
pkce_required400PKCE is mandatory for this client.

Hydra (RFC 6749)

CodeHTTPSummary
invalid_request400OAuth2 request is missing or has malformed parameters.
invalid_client401Client authentication failed.
invalid_grant400Authorization grant is invalid, expired, revoked, or doesn't match the redirect_uri.
unauthorized_client400Client not authorized to use this grant type.
unsupported_grant_type400Grant type not supported by the server.
invalid_scope400Requested scope is invalid or unknown.

Kratos

CodeHTTPSummary
self_service_flow_expired410Self-service flow has exceeded its TTL.
security_csrf_violation400CSRF token mismatch.
session_aal2_required403Session AAL is too low for the requested operation.
invalid_credentials400Login credentials are invalid.

SDK

CodeHTTPSummary
encryption_key_not_set500ENCRYPTION_KEY env var is not set.
encryption_key_blocklisted500ENCRYPTION_KEY is on the blocklist of known-weak values.
cipher_decrypt_fail500Decryption of an encrypted setting failed.

On this page