Error Codes

If at some point during the OneID® journey any error occurs, the user will be redirected to the return URL provided during authorization with two query parameters error and error_oneid.

The error parameter is part of the OAuth2 specification and the available errors are the following:

• invalid_request: The request is missing a required parameter, includes an invalid parameter value, includes a parameter more than once, or is otherwise malformed.
• unauthorized_client: The client is not authorized to request an authorization code using this method.
• access_denied: The resource owner or authorization server denied the request.
• invalid_scope: The requested scope is invalid, unknown, or malformed.
• server_error: The authorization server encountered an unexpected condition that prevented it from fulfilling the request.
• temporarily_unavailable: The authorization server is currently unable to handle the request due to a temporary overloading or maintenance of the server.

The error_oneid parameter is complimentary to the error and aims to further define the error that has occured. The following errors will appear only together with error=access_denied.

• OneID.OIDC.Redirect.RequestDenied: User canceled the journey while on their bank or the action was not permitted by the bank.
• OneID.OIDC.Redirect.UserCancelled: User canceled the journey before reaching their bank.
• OneID.OIDC.Redirect.SessionExpired: The current session expired and a new journey must be started. Sessions expire 30 minutes after creation.
• OneID.OIDC.Redirect.SessionNotFound: The session no longer exists or never existed.

Please note that new errors may be added at any time, so it is important to capture unknown values and handle them gracefully.