Client application cannot be authenticated

The credentials used in the Basic HTTP Authentication scheme are wrong.

Make sure that credentials from your app are used in the authorisation header during the token retrieval.

{
    "error": "invalid_client",
    "error_description": "Client application cannot be authenticated."
}

Invalid scope

Each API has its own scope (swift.preval, swift.messaging.api, etc.). This error is thrown when the OAuth client is configured with the wrong scope. Make sure that the correct scope is used and verify that the correct RBAC role is assigned to the certificate.

{
    "error": "invalid_scope",
    "error_description": "Access to requested scope cannot be granted."
}

Session could not be created

The JWT token is invalid. Verify the JWT structure and the signature.

{
    "error":"invalid_grant",
    "error_description":"Session could not be created for the Credentialed User."
}

Invalid JWT subject claim

The certificate DN does not match the JWT subject claim.

{
    "error":"invalid_grant",
    "error_description":"The signing certificate does not correspond to the requesting user."
}