ErrLookup › ory/kratos
ory/kratos
Headless cloud-native authentication and identity management written in Go. Scales to a billion+ users. Replace Homegrown, Auth0, Okta, Firebase with better UX and DX. Passkeys, Social Sign In, OIDC, Magic Link, Multi-Factor Auth, SMS, SAML, TOTP, and more. Runs everywhere, runs best on Ory Network. · Go · 1,057 source files
Analyzed at b86338da04 on 2026-09-07. 101 documented errors.
| Code / Message | Type | Severity | Tags |
|---|---|---|---|
| err | error_code | error | ory-kratos, hooks, test-hook, config |
| firescrypt ln= exceeds max | validation | error | hashing, scrypt, firebase, security |
| Could not compile the identity schema. This is an error… | console | error | internal-error, json-schema, swagger, cli |
| required credentials not found | exception | warning | go, webauthn, identifier-first, error-handling |
| no identifier found | validation | warning | go, passkey, webauthn, json-schema |
| no audience matched the token's audience | exception | error | oidc, jwt, audience, authentication |
| failed to initialize provider | exception | error | oidc, discovery, network, configuration |
| required config value "dsn" was not set | console | error | config, database, env |
| firescrypt r= not in [1, ] | validation | error | hashing, scrypt, firebase |
| firescrypt p= not in [1, ] | validation | error | hashing, scrypt, firebase |
| attempting to use the option 'pool_min_conns' with… | exception | error | database, postgres, connection-pool, config |
| configuration value not a valid URL | validation | error | config, url, parsing, validation |
| failed to decode PEM block containing private key | validation | error | go, oidc, apple-signin, pem |
| unexpected node type | error_code | error | json, unmarshal, ui-nodes, version-mismatch |
ErrNetworkFailure ErrNetworkFailure wrapped | error_code | warning | network, hibp, password, http-client |
| pbkdf2 i= not in [1, ] | validation | error | hashing, pbkdf2 |
| token audience didn't match allowed audiences: %+v | validation | error | oidc, jwt, verification, audience |
| scrypt N= not in [1, ] | validation | error | hashing, scrypt, security |
| failed to unmarshal webhook configuration for | validation | error | json, configuration, webhook, unmarshal |
| identity schema rejected: self-referential $ref cycle | validation | error | jsonschema, ref-resolution, cycle-detection, identity-schema |
| scrypt p= not in [1, ] | validation | error | hashing, scrypt |
| an error occurred initializing migrations | console | error | database, migrations, driver-init, cli |
| configuration value is not a valid URL | validation | error | config, url, scheme, validation |
| bcrypt cost= exceeds max | validation | error | |
| argon2 m= KiB not in [1, ] | validation | error | hashing, argon2, security |
| could not create request | exception | error | http, url, schema, configuration |
| received unexpected message template type | error_code | error | |
| could not parse as UUID | validation | error | uuid, parsing, session-management, cli |
| Could not add swagger schema to the schema compiler. This… | console | error | |
| failed to unmarshal notify_previous_addresses configuration… | validation | error | json, configuration, unmarshal |
| verification requested for unknown address | exception | warning | recovery, verification, auth, ory |
| scrypt r= not in [1, ] | validation | error | hashing, scrypt |
| attempting to use the option 'pool_min_conns' with | exception | error | database, sqlite, mysql, connection-pool, config |
| identity schema rejected: body exceeds | exception | error | |
| migrations have not yet been fully applied | http | error | database, migrations, startup, schema |
| normalizing | console | error | database, migration, batch-processing, phone-normalization |
| array must not be empty | validation | error | go, http-api, session, admin |
| An error occurred while cleaning up expired data | console | error | database, cleanup, expired-data, cli |
| courier: email recipient is not a valid email address | exception | error | email, validation, courier |
| : Could not marshal the traits schema. This usually means… | console | error | json, marshal, upstream-service, cli |
| ClientContextKey was expected to be *client.OryKratos but… | console | error | context, type-mismatch, cli, client |
| Private key decoding failed | exception | error | oidc, apple, private-key, pem, configuration |
| expected to get the DSN as an argument, or the… | console | error | cli, config, database |
| failed to deserialize provider claims | exception | error | oidc, discovery, json, parsing |
| requested unknown aal | validation | error | session, aal, invalid-argument, mfa |
| unknown node type: %T | error_code | error | json, marshal, ui-nodes, type-safety |
| identity schema rejected: invalid regex in pattern | validation | error | regex, jsonschema, identity-schema, validation |
| boolean unmarshal error: invalid input | validation | error | json, unmarshal, boolean, type-conversion |
| $ref scheme is not permitted in identity schemas | validation | error | jsonschema, ref-resolution, scheme-allowlist, security |
| no credentials found | exception | error | auth, login, ory, configuration |
| unable to parse text directory | console | error | |
| the provided number is not a valid phone number | validation | error | go, validation, phone-number, e164 |
| invalid $ref URL | validation | error | jsonschema, url, ref-resolution, identity-schema |
| continuity container name must be set | error_code | error | continuity, argument-validation, empty-value |
| identity schema rejected: invalid regex in… | validation | error | regex, jsonschema, identity-schema, pattern-properties |
| argon2 p= not in [1, ] | validation | error | hashing, argon2 |
| invalid --start-after format | validation | error | cli, argument-parsing, flag-format |
| Issuer URL must be set to autodiscover PKCE support | validation | error | oidc, oauth2, pkce, config |
| unable to write messages json to | console | error | |
| querying | console | error | database, sql, batch-query, migration |
| no oidc provider was set | exception | error | go, oidc, identity, settings-flow |
| unable to open or create message file at | console | error | |
| invalid UUID in --start-after | validation | error | cli, uuid, argument-parsing |
| you must provide `secrets.pagination` for FIPS compliance | error_code | error | config, fips, security, validation |
| unable to find strategy for | exception | error | |
| An error occurred initializing cleanup | console | error | database, initialization, driver, cli |
| argon2 t= not in [1, ] | validation | error | hashing, argon2 |
ErrUnexpectedStatusCode ErrUnexpectedStatusCode wrapped | error_code | warning | hibp, http, status-code, rate-limit, password |
| node type and node attributes mismatch: %T != | error_code | error | json, marshal, ui-nodes, type-mismatch |
| no courier channels configured for | error_code | error | courier, config, channel, missing-resource |
| The address type for sending OTP codes is not supported. | error_code | error | |
| Private key is not ecdsa key | validation | error | go, oidc, apple-signin, ecdsa, jwt |
| provider type is not supported, supported are | exception | error | oidc, configuration, unsupported-provider, enum |
| expected to find message | console | error | |
| unknown courier channel type | error_code | error | courier, config, channel-type, enum |
| expected to find const | console | error | |
| the wildcard '*' is not accepted here | validation | error | go, http-api, session, admin |
| empty response provided from the webhook | exception | error | |
| webhook response could not be unmarshalled properly from… | exception | error | |
| message ID is used more than once | console | error | |
| basic_auth auth strategy requires a string password | validation | error | configuration, auth, basic-auth, type-mismatch |
| you must provide `secrets.cipher` for FIPS compliance | error_code | error | config, fips, security, encryption |
| api_key auth strategy requires a string name | validation | error | configuration, webhook, auth, type-mismatch |
| unsupported auth type | validation | error | configuration, auth, unsupported |
| key does not exist in cookie: %+v | error_code | error | session, cookie, missing-key, gorilla-sessions |
| unable to find identity schema with id | error_code | error | |
| value of key is not of type string in cookie | error_code | error | session, cookie, type-mismatch, gorilla-sessions |
| webhook response body could not be read | exception | error | |
| could not read schema file | exception | error | filesystem, schema, configuration |
| you have to set the remote endpoint, try --help for details | console | error | |
| you must provide `secrets.cookie` for FIPS compliance | error_code | error | config, fips, security, cookies |
| expected zero or two args, got | validation | error | go, cli, cobra, arguments |
| basic_auth auth strategy requires a string user | validation | error | configuration, auth, basic-auth, type-mismatch |
| unable to dispatch mail delivery because upstream server… | error_code | error | |
| unable to close message file at | console | error | |
| at most IDs may be provided per call | validation | error | session-management, api, payload-limit |
| dsn must be set | console | error | |
| you must provide `secrets.default` for FIPS compliance | error_code | error | config, fips, security |
| could not parse the endpoint URL | console | error | |
| could not decode schema file | exception | error | schema, base64, encoding, configuration |