forbidden
Operation rejected for project scope (e.g. consume across projects).
On this page
HTTP 403securitypartner-2faapi
Code: forbidden · Shape: partner
Meaning
Operation rejected for project scope (e.g. consume across projects).
Likely causes
- Credentials belong to a different project than the challenge
- Cross-project id reuse
How to diagnose
- Confirm the challenge was created with the same project credentials used to consume.
How to fix
- Use one project’s credentials end-to-end for a challenge lifecycle.
Retry behavior
Do not retry with mismatched credentials.
Related
API: POST /v1/auth/challenge/{challengeId}/consume
SDK: consumeChallenge(), consumeChallenge()
Troubleshooting: credentials, partner-2fa
Guides: Verification