Go to developer

invalid_token

Token rejected — wrong, expired, or not valid for this operation.

On this page
HTTP 401verificationpartner-2faoauthapitypescriptjava

Code: invalid_token · Shape: partner

Meaning

Token rejected — wrong, expired, or not valid for this operation.

Likely causes

  1. Partner consume used a mismatched/stale verificationToken
  2. OAuth userinfo called with a bad Bearer access_token
  3. Token expired after challenge/approval window

How to diagnose

  • Partner: ensure token came from the approved poll for the same challengeId
  • OAuth: use the access_token from the latest successful exchange

How to fix

  • Partner: start a new challenge and capture verificationToken via waitForChallengeApproval
  • OAuth: restart login and exchange again before userinfo

Retry behavior

Do not retry the same token. Start a new flow.

API: POST /v1/auth/challenge/{challengeId}/consume, GET /oauth/userinfo

SDK: consumeChallenge(), waitForChallengeApproval(), getOAuthUserInfo()

Troubleshooting: partner-2fa, oauth

Guides: Verification, User Info