Skip to main content
Personal API keys and OAuth tokens receive a nested error envelope. Cookie session (APP) keeps a flatter SPA-compatible shape and is not documented here.

Envelope

Branch on error.type (stable machine code). Use userMessage when present for UI copy; otherwise message.

Common type values

Exact codes continue to expand; treat unknown types as generic failures.

Validation

Gateway ValidationPipe strips unknown body fields (whitelist) and transforms types. Field-level issues appear under error.fields when available.