Common status codes

Updated at:

This document describes the server-side integration error codes.

Common status codes

HTTP status code

Code

Description

200

Operation.Success

The operation is successful.

500

Operation.Failure

The operation failed.

500

Operation.Failure.UnknownError

An unknown error occurred.

500

Operation.Failure.DatabaseError

An error occurred during a database operation.

400

Params.Blank

A parameter is empty. Check the Message field for details. For example: The external application ID is empty - `Params.Blank.APIInvokeParams.ApplicationExternalId`. The authentication method identifier is empty - `Params.Blank.APIInvokeParams.ServiceCode`. The authentication type identifier is empty - `Params.Blank.APIInvokeParams.Action`.

400

Params.Illegal

A parameter is invalid. Check the Message field for details. For example: Invalid authentication identifier - `Params.Illegal.APIInvokeParams.ServiceCode.Unsupported`. Invalid authentication type identifier - `Params.Illegal.APIInvokeParams.Action.Unsupported`.

500

Operation.Failure.Application.ResourceNotExist

The application does not exist. This error usually occurs when the application cannot be found using the external application ID.

500

Operation.Failure.Application.HasBeenArchived

The application was deleted.

500

Operation.Failure.Application.HasBeenDisabled

The application was disabled.

403

Operation.Denied

The operation is denied. Check the Message field for details. For example: The application is not authorized for the authentication method - `APIInvokeError.ApplicationHasNoAuthority`.

500

Operation.Failure.Tenant.ResourceNotExist

The tenant does not exist. This means the security authentication service is not activated for the current Alibaba Cloud account.

500

Operation.Failure.Tenant.HasBeenDisabled

The tenant is disabled. This means the security authentication service for the current Alibaba Cloud account was disabled.

500

Operation.Failure.Tenant.HasBeenArchived

The tenant is deleted. This means the security authentication service for the current Alibaba Cloud account is being unregistered.

403

Operation.Denied.TenantNotFoundInContext

The context does not contain tenant information.

500

Operation.Failure.Verify.Signature

Signature verification failed.

500

APIInvokeError.ServiceInArrears

The service has an overdue payment.

500

Operation.Failure.ServiceCodeMismatchServiceImpl

Service routing error. The selected service does not support the specified authentication method. This error rarely occurs.

500

Operation.Failure.ApiInvoke.DependedServerUnavailable

Internal service invocation is abnormal because a dependent service is unavailable. For example, a network connectivity error occurred.

500

Operation.Failure.ApiInvoke.DependedServerUnknownError

Internal service invocation is abnormal because an unknown error occurred in an underlying dependency.

500

Operation.Failure.ApiInvoke.DependedServerReturnError

Internal service invocation is abnormal because an underlying dependency returned an error.

500

Operation.Failure.ApiInvoke.DependedServerConfigError

Internal service invocation is abnormal because of a configuration error in an underlying dependency.

401

Operation.AuthenticationRequired

Authentication or authorization error. This error usually occurs because the Resource Access Management (RAM) user that corresponds to the AccessKey (AK) used for the API call has not been granted the required permissions for the security authentication service.

TOTP

HTTP status code

Code

Description

500

Operation.Failure.Otp.ResourceNotExist

The token does not exist.

500

Operation.Failure.Otp.VerifyErrorForCodeWrong

The security token is incorrect.

500

Operation.Failure.Otp.VerifyErrorForAuthenticatorStatusError

The token is disabled.

500

Operation.Failure.Otp.VerifyErrorForHexDecodedKeySeedError

Failed to decode the token key.

500

Operation.Failure.Otp.VerifyErrorForAuthenticatorTypeMismatch

The authenticator type does not match.

500

Operation.Failure.Otp.VerifyErrorForTenantIdMismatch

This authenticator does not belong to the current Alibaba Cloud account.

500

Operation.Failure.Otp.VerifyErrorForApplicationIdMismatch

The application ID does not match.

500

Operation.Failure.Otp.UserAlreadyHasBoundKey

This user has already registered a TOTP authenticator.

500

Operation.Denied.TenantNotFoundInContext

The service has not been activated for the current Alibaba Cloud account.

500

Operation.Failure.OTP.UnsupportedVerifyMode

The VerifyMode is not supported.

500

Operation.Failure.OTP.UnsupportedUniqueIdType

The ID type is not supported.

500

Operation.Failure.OTP.UnsupportedAlgorithm

The algorithm type is not supported.

500

Operation.Failure.OTP.UnsupportedKeyEncodeFormat

The secret key encryption type is not supported.

500

Operation.Failure.OTP.UserHasNoOTPAuthenticator

The user has not bound a token.

500

Operation.Failure.OTP.TimingFailed

Failed to bind the token to the user.

500

Operation.Failure.OTP.RegErrorForHexDecodedKeySeedError

Failed to decode the key from HEX format.

500

Operation.Failure.OTP.VerifyFailed

Security token verification failed.

500

Operation.Failure.OTP.RegErrorForParseOTPSecret

Failed to parse the token key.

500

Operation.Failure.OTP.RegErrorForChallengeInvalidOrExpired

The challenge code is expired or incorrect.

500

Operation.Failure.OTP.RegErrorForBoundUserIdMismatch

The user ID does not match.

500

Operation.Failure.OTP.RegErrorForEncodeKeySeedToQrImg

Failed to generate a QR code from the key.

WebAuthn

HTTP status code

Code

Description

500

Operation.Failure.Authenticator.InvalidRpId

WebAuthn authenticator registration failed because of an incorrect RP ID.

500

Operation.Failure.Authenticator.UnsupportedType

The authenticator type is not supported.

500

Operation.Failure.Authenticator.ReplicatedAuthentication

Reauthentication request

500

Operation.Failure.Authenticator.ResourceNotExist

The authenticator does not exist.

500

Operation.Failure.Authenticator.DuplicateCredentialId

The authenticator already exists.

500

Operation.Failure.Authenticator.InvalidChallenge

The challenge code is expired or incorrect.

500

Operation.Failure.Authenticator.InvalidClientData

Incorrect WebAuthn attestationObject information.

500

Operation.Failure.Authenticator.UnsatisfiedRegistrationParse

The WebAuthn registration request was not satisfied.

500

Operation.Failure.Authenticator.UnsatisfiedUserPresence

The user presence requirement for the WebAuthn request was not satisfied.

500

Operation.Failure.Authenticator.UnsatisfiedUserVerified

The user verification requirement for the WebAuthn request was not satisfied.

500

Operation.Failure.Authenticator.VerifyAuthenticationFailed

Unsuccessful WebAuthn registration request

500

Operation.Failure.Authenticator.WebAuthnExceededQuota

The WebAuthn quota is exceeded.

500

Operation.Failure.Authenticator.CredentialIdAlreadyExist

An authenticator with the same CredentialId already exists.