ErrLookup › thephpleague/oauth2-server
thephpleague/oauth2-server
A spec compliant, secure by default PHP OAuth 2.0 Server · PHP · 63 source files
Analyzed at 9d2f6fc0a0 on 2026-09-15. 23 documented errors.
| Code / Message | Type | Severity | Tags |
|---|---|---|---|
| client authentication failed | http | error | oauth2, php, authentication, client-credentials |
invalid_grant Cannot validate the provided authorization code | http | error | oauth2, invalid-grant, authorization-code, php-league-oauth2-server |
invalid_client invalid_client | http | error | oauth2, php, client-not-found, invalid-client |
5 The requested scope is invalid, unknown, or malformed | http | error | oauth2, scope, refresh-token-grant, php, league-oauth2-server |
6 The user credentials were incorrect. | http | error | oauth2, password-grant, invalid-credentials, authentication |
invalid_scope The requested scope is invalid, unknown, or malformed | http | error | oauth2, scope, validation, configuration |
unauthorized_client unauthorized_client | http | error | oauth2, php, unauthorized-client, grant-type |
access_denied The user denied the request | http | info | oauth2, implicit-grant, access-denied, user-consent |
| Access token has been revoked | http | error | oauth, token-revocation, bearer-token |
| invalid request: client_secret | http | error | oauth, client-authentication, missing-parameter |
server_error Unsupported code challenge method | http | error | oauth2, pkce, server-error, php |
invalid_request The request is missing a required parameter, is invalid, includes an invalid… | http | error | oauth2, php, missing-parameter, http-400 |
| Missing "Bearer" token | http | error | oauth, bearer-token, empty-value |
| Access token is not an instance of UnencryptedToken | http | error | oauth, jwt, token-type |
3 The request is missing a required parameter, includes an invalid parameter… | http | error | oauth2, missing-parameter, refresh-token-grant, php |
8 The refresh token is invalid. | http | error | oauth2, refresh-token, decryption, php, league-oauth2-server |
slow_down slow_down | http | warning | oauth2, device-flow, rate-limit, polling |
authorization_pending authorization_pending | http | info | oauth2, device-flow, polling |
| invalid request: response_type | http | error | oauth, authorization-request, missing-parameter |
expired_token The `device_code` has expired and the device authorization session has… | http | error | oauth2, device-flow, token-expired |
| unsupported grant type | http | error | oauth, grant-type, configuration |
| Access token could not be verified | http | error | oauth, jwt, signature-verification |
| Missing "Authorization" header | http | error | oauth, bearer-token, http-header |