Errors

Access Token Error Codes

Error	Error Description
`invalid_grant`	`grant_type is invalid. Accepted values: refresh_token, client_credentials, authorization_code`
`invalid_grant`	`Invalid refresh_token`
`invalid_request`	`Invalid client_id`
`invalid_request`	`Missing fields in POST body client_id, client_secret, grant_type and scope required.`
`invalid_request`	`OAuth 2.0 Parameter: <parameter name> missing`
`invalid_request`	`POST body is empty.`
`invalid_request`	`Unsupported Media Type for POST body. Must be json.`
`invalid_scope`	`scope is invalid. Accepted values: business_connect` Service Account, only

Error	Error Description
`invalid_client`	`Invalid client_id or client_secret`
`invalid_grant`	`Invalid refresh_token`

Error	Error Description
`404 Not Found`	`invalid_request`

Error	Error Description
`internal_server_error`	`AN_UNKNOWN_ERROR_OCCURRED`
`internal_server_error`	`server error`

Error	Error Description
`unsupported_response_type`	`response_type must be code`
`invalid_request`	`code_challenge_method must be S256`
`invalid_request`	`client_id does not match a registered OAuth app`
`invalid_request`	`bad request`
`invalid_request`	`redirect_uri must not be empty string`
`invalid_request`	`redirect_uri is not valid`
`invalid_request`	`localhost is not allowed for redirect_uri. Use the IP literal (127.0.0.1) instead`
`invalid_request`	`redirect_uri does not match one of the registered redirect_uri on OAuth app`
`invalid_request`	`scope must not be empty string`
`invalid_scope`	`scope is not valid`
`invalid_request`	`client_id must not be empty string`
`server_error`	`server error`

Parameter	Description
error	Error code
error_description	Error description

Path Template
POST {url}?{parameters}

Path Example
POST {url}?error=unsupported_response_type&error_description=response_type+must+be+code&state=xyzABC123

note

A whitespace character is encoded as + in an error description

Error Description	Cause
`Invalid refresh_token`	User revoked partner's access to their Apple Business account Expired authorization code passed in token request