invalid_token
Token rejected — wrong, expired, or not valid for this operation.
On this page
HTTP 401verificationpartner-2faoauthapitypescriptjava
Code: invalid_token · Shape: partner
Meaning
Token rejected — wrong, expired, or not valid for this operation.
Likely causes
- Partner consume used a mismatched/stale verificationToken
- OAuth userinfo called with a bad Bearer access_token
- Token expired after challenge/approval window
How to diagnose
- Partner: ensure token came from the approved poll for the same challengeId
- OAuth: use the access_token from the latest successful exchange
How to fix
- Partner: start a new challenge and capture verificationToken via waitForChallengeApproval
- OAuth: restart login and exchange again before userinfo
Retry behavior
Do not retry the same token. Start a new flow.
Related
API: POST /v1/auth/challenge/{challengeId}/consume, GET /oauth/userinfo
SDK: consumeChallenge(), waitForChallengeApproval(), getOAuthUserInfo()
Troubleshooting: partner-2fa, oauth
Guides: Verification, User Info
