Sign in with Fades errors
What common OAuth errors mean and how to fix them.
Updated October 10, 2026When something goes wrong, the user is sent back to your redirect URL with an error parameter, or the token endpoint returns one.
Common errors
invalid_request: a required parameter is missing or malformed.invalid_client: the client ID or secret is wrong.invalid_grant: the code has expired, was already used, or doesn't match your redirect URL or PKCE verifier. Start the flow again.redirect_uri_mismatch: the redirect URL isn't registered exactly as you sent it. See Register an app.access_denied: the user chose not to approve. Handle this gracefully in your UI.invalid_scope: you asked for a scope that doesn't exist.
For general HTTP errors, see API errors and status codes.
Was this article helpful?
Still need help?
Tell us what's happening and we'll take a look.