invalid_credentials

HTTP status: 401 · Code: invalid_credentials

The email and password do not match a user, or the password given to confirm an action is wrong.

Why it happens

The email and password don’t match a user in the project, or the password given to confirm a change (like a new email) is wrong. The message is the same either way, so nobody can learn which emails have accounts.

How to fix

Show a message like “Wrong email or password” and let the person try again, or offer a password reset. Don’t tell them whether the email exists.

Catch it in your code

Every SDK throws one error type for a failed call. Match on its code, which is always invalid_credentials for this error, never on the message.

JavaScript and Next.js

import { ErrorCode, OrvanoError } from '@orvano/js'

try {
  // your Orvano call
} catch (error) {
  if (error instanceof OrvanoError && error.code === ErrorCode.invalidCredentials) {
    // handle invalid_credentials
  } else {
    throw error
  }
}

Dart and Flutter

import 'package:orvano_flutter/orvano_flutter.dart'; // or orvano_dart on a server

try {
  // your Orvano call
} on OrvanoException catch (error) {
  if (error.code != ErrorCode.invalidCredentials) rethrow;
  // handle invalid_credentials
}

.NET

using Orvano;

try
{
    // your Orvano call
}
catch (OrvanoException error) when (error.Code == ErrorCode.InvalidCredentials)
{
    // handle invalid_credentials
}

The error also carries the HTTP status (401), a message, and a request ID. Quote the request ID when you report a problem: the server logs it with the failure. See Errors for how errors work in every SDK, or every error code.