BerriAI/litellm · error · XAIOAuthError

xAI authorization failed: {description}

Error message

xAI authorization failed: {description}

What it means

XAIOAuthError raised when the OAuth callback carried an 'error' field: the authorization server (or user denial) reported a failed consent, with error_description preferred over the bare error code in the message.

Source

Thrown at litellm/llms/xai/oauth.py:151

        server, redirect_uri = self._start_callback_server(state)
        authorize_url: Final = self._build_authorize_url(
            authorization_endpoint=discovery["authorization_endpoint"],
            redirect_uri=redirect_uri,
            challenge=challenge,
            state=state,
            nonce=nonce,
        )

        if no_browser or not webbrowser.open(authorize_url):
            sys.stdout.write(f"Open this URL to authenticate with xAI:\n{authorize_url}\n")
            sys.stdout.flush()

        result: Final = self._wait_for_callback(server)
        if result.get("state") != state:
            raise XAIOAuthError("xAI OAuth state mismatch")
        if result.get("error"):
            description: Final = result.get("error_description") or result["error"]
            raise XAIOAuthError(f"xAI authorization failed: {description}")
        code: Final = result.get("code")
        if not code:
            raise XAIOAuthError("xAI authorization failed: no code returned")

        token_payload: Final = self._exchange_token(
            discovery["token_endpoint"],
            {
                "grant_type": "authorization_code",
                "code": code,
                "redirect_uri": redirect_uri,
                "client_id": XAI_OAUTH_CLIENT_ID,
                "code_verifier": verifier,
            },
        )
        auth_data: Final = self._build_auth_record(token_payload, discovery["token_endpoint"])
        self._write_auth_file(auth_data)
        return auth_data

View on GitHub (pinned to 77b7c6c40c)

Solutions

1. Read the error description in the message returned by xAI (e.g. access_denied) and address the cause.
2. Retry the login flow and approve the requested scopes in the xAI consent screen.

When it happens

Trigger: Thrown at litellm/llms/xai/oauth.py:151 when the library encounters an invalid state.

Common situations: See trigger scenarios.

AI-assisted analysis of BerriAI/litellm@77b7c6c40c (2026-08-18). Data as JSON: /api/errors/d42d7ad586f102fc. Report an issue: GitHub.