Error map
invalid_request OAuth 2.0 Error: invalid_request (missing or invalid parameter)
Authentication · layer 4, Application & API
Centre: this error. First ring: errors it is linked with (12). Outer ring: what those are linked with. Colours show the layer of a request each error belongs to. Click any dot to re-centre the map on it; hover to follow its connections. The centre dot opens the error page.
Directly related (12)
HTTP 400 Bad Request
The server could not understand the request because its syntax, headers or body are malformed or invalid.
Google OAuth: Error 403: disallowed_useragent (sign-in from an embedded WebView)
Google blocks OAuth sign-in inside embedded WebViews (in-app browsers, Electron BrowserWindow, React Native WebView).
OAuth Error: redirect_uri_mismatch
The redirect URI in your OAuth request doesn’t exactly match one registered for the client in the provider’s console.
Upload error: File type not allowed / unsupported file type
The upload was rejected because the file’s type — extension, MIME type or actual content — isn’t on the allowed list.
API Error: Request failed schema validation (must NOT have additional properties / Additional properties are not allowed)
The JSON body doesn’t match the endpoint’s schema — an unknown property, wrong nesting, or a missing required object.
API Error: Invalid ID format (not a valid UUID / malformed identifier)
An ID in the URL or body doesn’t have the shape the API expects — a malformed UUID, wrong prefix, or an ID mangled by encoding or…
OAuth PKCE error: invalid_grant — PKCE verification failed / code_verifier does not match code_challenge / code_challenge required
The code_verifier sent to the token endpoint doesn’t match the code_challenge from the authorize request, or PKCE is required but…
API Error: Invalid type — expected integer, received string
A request field has the wrong data type — a string where the API expects a number, a number where it expects a boolean, an object…
API Error: Invalid parameter value — must be one of the allowed values / out of range
The field has the right type but a value the API doesn’t allow — not in the list of accepted options, too small or large, too lon…
API Error: Invalid date format — expected ISO 8601 (YYYY-MM-DDTHH:mm:ssZ)
A date or timestamp in the request isn’t in the format the API expects — usually ISO 8601 with a time zone, or a Unix timestamp.
GitHub OAuth: {"error":"bad_verification_code","error_description":"The code passed is incorrect or expired."}
The authorization code sent to GitHub’s token endpoint was already used, expired (10 minutes), or belongs to another OAuth app.
API Error: Missing required parameter (parameter_missing / "x" is required)
The API rejected the request because a field it requires — in the query string, path, headers or JSON body — wasn’t sent or was e…
Two steps away (36)
HTTP 401 Unauthorized
The request has no valid authentication credentials — you need to log in or send a valid token.
HTTP 405 Method Not Allowed
The URL exists, but it doesn’t accept the HTTP method you used (e.g. POST to a GET-only route).
HTTP 413 Content Too Large (Request Entity Too Large)
The request body is bigger than the server is willing to accept — usually a file upload over the configured limit.
OAuth 2.0 Error: access_denied (The user or authorization server denied the request)
The authorization request was refused — the user clicked Cancel/Deny on the consent screen, or a policy denied access.
Google OAuth: Google hasn't verified this app / This app isn't verified
The OAuth app requests sensitive or restricted scopes and hasn’t passed Google’s verification, so users see a warning screen.
Google OAuth: Error 401: deleted_client — The OAuth client was deleted
The OAuth client ID used in the request has been deleted from the Google Cloud project.
Azure AD (Entra ID): AADSTS700016 Application not found in the directory
The client ID in your sign-in request doesn’t exist in the tenant you’re authenticating against.
OAuth 2.0 Error: invalid_grant
The authorization code, refresh token or credentials sent to the token endpoint are invalid, expired, already used or were issued…
OAuth 2.0 Error: invalid_client
The OAuth server couldn’t authenticate your application — wrong client ID/secret, wrong auth method, or the client doesn’t exist…
HTTP 415 Unsupported Media Type
The server refuses the request because the body’s Content-Type isn’t one it accepts.
WordPress: The link you followed has expired
Usually an upload (theme, plugin, media) larger than PHP’s upload/post limits — WordPress receives an empty request and shows thi…
WordPress: Sorry, you are not allowed to access this page.
Your user role lacks the capability for that admin screen — or the database table prefix / user capabilities are out of sync afte…
MySQL ERROR 1146 (42S02): Table 'db.table' doesn't exist
The query references a table that MySQL can’t find in that database.
MySQL ERROR 1054 (42S22): Unknown column in 'field list'
The query references a column that doesn’t exist in the table (or an unquoted string being read as a column).
PostgreSQL: ERROR: relation "x" does not exist
The table/view isn’t found — missing migration, wrong schema, or a case-sensitive quoted name.
CastError: Cast to ObjectId failed for value "x" (type string) at path "_id"
A value that isn’t a valid 24-hex-character ObjectId was used in an _id query.
ERROR: invalid input syntax for type uuid: "x"
A value that isn’t a valid UUID was compared with or inserted into a uuid column.
API Error: No such object / resource_missing (resource not found by ID)
The endpoint exists, but the ID you passed — in the URL or as a reference in the body — doesn’t match any record the caller can s…
OAuth 2.0 Error: unsupported_response_type
The authorize request asked for a response_type the client or server doesn’t allow — e.g. token (implicit) when only code is enab…
OAuth callback error: state mismatch / Unable to verify authorization request state / State cookie was missing
The state value returned to the callback doesn’t match what the app stored before redirecting — the CSRF protection for OAuth fai…
Firebase Auth: auth/popup-closed-by-user / auth/popup-blocked / auth/cancelled-popup-request
The OAuth popup for Google/GitHub sign-in was closed, blocked by the browser, or replaced by another popup request.
HTTP 422 Unprocessable Content
The request is well-formed, but the data fails validation (e.g. invalid email, missing required field).
MySQL ERROR 1406: Data too long for column
The value is longer than the column allows (e.g. 300 characters into VARCHAR(255)), and strict mode rejects it instead of truncat…
java.lang.NumberFormatException: For input string: "x"
A string couldn’t be parsed as a number — it’s empty, has spaces/commas, is too large, or isn’t numeric.
java.lang.IllegalArgumentException
A method rejected an argument value as invalid.
MethodArgumentNotValidException: Validation failed for argument [0]
Bean Validation (@Valid with @NotNull, @Email, @Size…) rejected the request body.
MySQL ERROR 1048 (23000): Column 'x' cannot be null
An INSERT/UPDATE put NULL into a NOT NULL column.
java.time.format.DateTimeParseException: Text '31/12/2024' could not be parsed at index 2
A java.time parse call got text that doesn’t match the expected format.
java.text.ParseException: Unparseable date: "x"
SimpleDateFormat couldn’t parse the string with its pattern.
RangeError: Invalid time value
A Date is invalid (NaN), and toISOString() or a formatting library couldn’t format it.
OAuth 2.0 Error: invalid_scope / insufficient_scope
The requested scope is unknown or not allowed for this client — or the token lacks the scope the API endpoint requires.
AADSTS500113: No reply address is registered for the application
The app registration has no redirect URI for the platform being used, so Entra ID has nowhere to send the response.
OAuth 2.0 Error: unsupported_grant_type
The token endpoint didn’t recognise grant_type — usually because the body wasn’t sent as application/x-www-form-urlencoded, or th…
HTTP 411 Length Required
The server refuses a request with a body but no Content-Length header.
API Error: Malformed JSON in request body (entity.parse.failed / JSON parse error)
The server couldn’t parse the request body as JSON, so it rejected the request before looking at any field.
API Error: limit must be less than or equal to 100 (page size exceeds maximum)
You asked for more items per page than the endpoint allows.
Map another error
Popular: 500403400ORA-009331064Critical errorFileNotFoundException assemblyTypeError