Skip to content

Commit

Permalink
splits out different errors messages as separate partials files
Browse files Browse the repository at this point in the history
  • Loading branch information
PippaClarkGDS committed Jan 24, 2025
1 parent cd2841d commit 829193e
Show file tree
Hide file tree
Showing 5 changed files with 36 additions and 30 deletions.
10 changes: 9 additions & 1 deletion source/error-messages.html.md.erb
View file
Original file line number Diff line number Diff line change
Expand Up @@ -11,8 +11,16 @@ This page collates the error messages from GOV.UK One Login.

## Error messages from the `/authorize` endpoint

<%= partial "partials/authorize-errors" %>

## Error messages from the `/userinfo` endpoint

<%= partial "partials/userinfo-errors" %>

## Error messages from the `/token` endpoint

<%= partial "partials/links" %>
<%= partial "partials/token-errors" %>


<%= partial "partials/links" %>

13 changes: 13 additions & 0 deletions source/partials/_authorize-errors.erb
View file
Original file line number Diff line number Diff line change
@@ -0,0 +1,13 @@
<!-- authorize error messages -->


| HTTP status response code | Error | More information about your error |
|------------------|-------------------------------------------|--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------|
|000| `unauthorized_client` | In rare circumstances, such as a security incident, One Login may prevent users from logging in to your service. If this happens, the error code `unauthorized_client` will be returned with the error description `client deactivated`. When your service receives this error, you must show the user a custom error page to explain that they cannot use your service at the moment and should try again later. |
|000| `invalid_request` | The request has one or more of the following issues: <ul><li>missing a required parameter</li><li>includes an invalid parameter value</li><li>includes a parameter more than once</li><li>not in the correct format</li></ul><br>You can [check which parameters GOV.UK One Login supports when you make an authorisation request][integrate.make-authorization-request]. |
|000|`invalid_request - Request vtr not valid` | You've requested single factor authentication and identity information. To make a successful identity request, you must request two-factor authentication and the identity level of confidence, for example `Cl.Cm.P2`. |
|000| `invalid_scope` | The scope or scopes you have requested are invalid, unknown, or are not in the correct format.<br>You can read more about scopes in [choosing which user attributes your service can request][integrate.choose-user-attributes]. |
|000| `unsupported_response_type` | Your service is not registered for the requested `response_type`. <br>You must set the `response_type` to be code: `response_type=code`. |
|000| `server_error` | The GOV.UK One Login authentication server has experienced an internal server error. |
|000| `temporarily_unavailable` | If you're only making an authentication request (as opposed to requesting both authentication and identity), this error code means the GOV.UK One Login authentication server is temporarily unavailable, which might be caused by temporary overloading or planned maintenance. <br>Make your request again in a few minutes. <br> <br> If you're making an identity request and you get this error, it means the identity proving and verification does not currently have capacity for this request. |
|000| `access_denied` | GOV.UK One Login returns this error in 2 scenarios.<br><br>The first scenario is that the identity evidence your user provided has a lower score than the identity confidence specified in your request. As a result, GOV.UK One Login could not return the medium level of identity confidence (`P2`) and instead returned a lower level of identity confidence.<br><br> If you’re using return codes, you will not receive this error. Instead, GOV.UK One Login returns an array of single letter `returnCode` values through the `userinfo` endpoint. Find more information on [understanding the return codes claim](/integrate-with-integration-environment/prove-users-identity/#understand-your-user-s-return-code-claim).<br><br>The second scenario is that the session in the user’s browser is unavailable. This can happen when your user’s cookies have been lost or your user changed browsers during the identity verification process. In this scenario, you should ask your user to log in again or restart the identity verification process. |
Loading

0 comments on commit 829193e

Please sign in to comment.