Error codes
How to interpret error codes, statuses, and next steps.
Error codes and statuses
Use this reference to map HTTP status + error.code to likely root cause and next step.
Common HTTP statuses used
200OK: request succeeded400Bad Request: malformed input (less common than422)401Unauthorized: missing/invalid authentication403Forbidden: policy denial (scope, CSRF, CORS, feature disabled)404Not Found: route/resource missing (or disabled extension)409Conflict: idempotency/state conflict413Payload Too Large: request exceeded configured size limit422Unprocessable Entity: validation failure429Too Many Requests: rate limit exceeded500Internal Server Error: server exception501Not Implemented: provider/strategy is a stub or unavailable503Service Unavailable: dependency/provider outage
How to debug any error quickly
Capture:
- Endpoint + method
- HTTP status
error.code+error.messagemeta.correlationId(orX-Correlation-Idheader)- Auth mode used (
cookie,Bearer, API key)
Then:
- Search logs/security events by correlation id.
- Validate CORS + nonce expectations for browser/cookie flows.
- Validate API key scopes for service-account flows.
Quick map by error family
- Auth / identity (
401/403)NOT_AUTHENTICATED,AUTH_INVALID_CREDENTIALS,INVALID_TOKENTOKEN_AUTH_DISABLED,API_KEY_AUTH_DISABLED,SERVICE_ACCOUNT_SCOPE_DENIED
- Browser/policy (
403or browser-blocked)CSRF_FAILED, CORS blocks,SUSPICIOUS_REQUEST_*
- Feature/provider/dependency (
403/501/503)FEATURE_DISABLED,DEPENDENCY_UNAVAILABLE,STORE_API_*,CHECKOUT_*
- Validation/input (
413/415/422)VALIDATION_FAILED,PASSWORD_POLICY_VIOLATION,PAYLOAD_TOO_LARGE,UNSUPPORTED_MEDIA_TYPE
- Not found (
404)NOT_FOUND,*_NOT_FOUND(product, form, booking, user, page, menu)
- Conflict (
409)IDEMPOTENCY_KEY_REUSE_CONFLICT
Known error codes (observed in code)
ACCOUNT_DEACTIVATION_DISABLEDACCOUNT_EXISTS_LOGIN_REQUIREDAFFILIATE_EXISTSAFFILIATE_NOT_ACTIVEAFFILIATE_NOT_FOUNDAFFILIATE_TERMS_DISABLEDAFFILIATE_TERMS_REQUIREDALERT_NOT_DISMISSIBLEAPI_KEY_AUTH_DISABLEDAPPLICATION_FAILEDAUTH_ACCOUNT_DEACTIVATEDAUTH_EMAIL_VERIFICATION_TOKEN_ALREADY_USEDAUTH_EMAIL_VERIFICATION_TOKEN_EXPIREDAUTH_EMAIL_VERIFICATION_TOKEN_INVALIDAUTH_INVALID_CREDENTIALSAUTH_PASSWORD_RESET_DISABLEDAUTH_PASSWORD_RESET_FAILEDAUTH_PASSWORD_RESET_TOKEN_EXPIREDAUTH_PASSWORD_RESET_TOKEN_INVALIDAUTH_PASSWORD_SET_DISABLEDAUTH_RATE_LIMITEDAUTH_REGISTRATION_DISABLEDAUTH_REGISTRATION_FAILEDBILLING_NOT_ENABLEDBILLING_PORTAL_UNAVAILABLEBOOKING_ACTION_FAILEDBOOKING_ACTION_NOT_ALLOWEDBOOKING_ALREADY_CANCELLEDBOOKING_CANCEL_NOT_ALLOWEDBOOKING_CREATE_FAILEDBOOKING_NOT_FOUNDBOOKING_RESCHEDULE_NOT_ALLOWEDBOOKING_SLOT_UNAVAILABLEBOOKING_TYPE_NOT_FOUNDCHECKOUT_DISABLEDCHECKOUT_EMAIL_INVALIDCHECKOUT_EMAIL_REQUIREDCHECKOUT_FAILEDCHECKOUT_NOT_IMPLEMENTEDCHECKOUT_USER_CREATE_FAILEDCOUPON_APPLY_RATE_LIMITEDCOUPON_CODE_INVALIDCOUPON_CODE_REQUIREDCOUPON_PROBE_LIMITEDCOURSE_NOT_FOUNDCSRF_FAILEDDEPENDENCY_UNAVAILABLEDONATION_NOT_FOUNDFEATURE_DISABLEDFORBIDDENFORM_NOT_FOUNDIDEMPOTENCY_KEY_REUSE_CONFLICTINTERNAL_SERVER_ERRORINVALID_TOKENINVALID_WEBHOOK_PAYLOADLICENSE_REQUIREDLOG_NOT_FOUNDMEDIA_DOWNLOADS_DISABLEDMEDIA_DOWNLOAD_FORBIDDENMEDIA_RESOURCE_NOT_FOUNDMENU_NOT_FOUNDNOT_AUTHENTICATEDNOT_FOUNDPAGE_NOT_FOUNDPASSWORD_POLICY_VIOLATIONPAYLOAD_TOO_LARGEPRODUCT_NOT_ALLOWEDPRODUCT_NOT_FOUNDPROFILE_UPDATE_FAILEDPURCHASE_NOT_FOUNDRATE_LIMITEDSERVICE_ACCOUNT_SCOPE_DENIEDSSO_ASSERTION_INVALIDSSO_DISABLEDSSO_PROVIDER_NOT_CONFIGUREDSTORE_API_PROXY_ERRORSTORE_API_UNAVAILABLESTORE_API_UPSTREAM_ERRORSUSPICIOUS_REQUEST_BLOCKEDSUSPICIOUS_REQUEST_THROTTLEDUNKNOWN_ERRORUNSUPPORTED_MEDIA_TYPEUSER_NOT_FOUNDVALIDATION_FAILEDWEBHOOK_NOT_CONFIGURED
Error envelope shape
{
"error": {
"code": "VALIDATION_FAILED",
"message": "Validation failed.",
"details": {},
"httpStatus": 422,
"correlationId": "abcd1234",
"hints": []
},
"meta": {}
}