[Openid-specs-fapi] Issue #373: Grant Management uses invalid_grant as authorization response error (openid/fapi)

panva issues-reply at bitbucket.org
Thu Feb 18 10:36:02 UTC 2021


New issue 373: Grant Management uses invalid_grant as authorization response error
https://bitbucket.org/openid/fapi/issues/373/grant-management-uses-invalid_grant-as

Filip Skokan:

```
### Error Response

In case the `grant_id` is unknown or invalid, the authorization server will respond with an error code `invalid_grant` (as defined in [@!RFC6749]).
```

The invalid\_grant error as defined in 6749 is a “token endpoint” error.

> The authorization server responds with an HTTP 400 \(Bad Request\) status code

This specification should therefore register the error\_code for use at the different endpoints \(authorization\[, device\_authorization, ciba\]\) it is possible to return the code from in IANA.




More information about the Openid-specs-fapi mailing list