Errors

HTTP status codes and troubleshooting.

StatusMeaning
401Not authenticated — sign in again
403Forbidden — insufficient org role or OpenFGA denial
404Resource not found
503Authorization service unavailable (OpenFGA not configured)
500Unexpected server error — retry or contact support

Validation errors return 400 with field-level detail when applicable. Never log or expose session tokens in client error messages.