auth errors

Error contracts and compatibility index. Follow the actual response’s message, field details and next actions. Never infer retry safety from the code name alone.

R402_AUTH_ACTOR_HEADER_SPOOF

Owner: gateway:packages/gateway/src/utils/error-envelope.ts, core:packages/functions/src/runtime-context.ts.

The application authentication contract rejected or could not establish the requested actor context. Follow the returned message and suggested fix. Use supported auth helpers in request context; do not manufacture actor headers or bypass role/freshness gates.

R402_AUTH_AUTHZ_VERSION_PROHIBITED

Owner: public:sdk/src/node/source-scan.ts, gateway:packages/gateway/src/utils/error-envelope.ts.

The application authentication contract rejected or could not establish the requested actor context. Follow the returned message and suggested fix. Use supported auth helpers in request context; do not manufacture actor headers or bypass role/freshness gates.

R402_AUTH_BEARER_COOKIE_MISMATCH

Owner: gateway:packages/gateway/src/utils/error-envelope.ts.

The application authentication contract rejected or could not establish the requested actor context. Follow the returned message and suggested fix. Use supported auth helpers in request context; do not manufacture actor headers or bypass role/freshness gates.

R402_AUTH_COOKIE_ATTRIBUTES_INVALID

Owner: gateway:packages/gateway/src/utils/error-envelope.ts.

The application authentication contract rejected or could not establish the requested actor context. Follow the returned message and suggested fix. Use supported auth helpers in request context; do not manufacture actor headers or bypass role/freshness gates.

R402_AUTH_CSRF_ORIGIN_MISMATCH

Owner: gateway:packages/gateway/src/utils/error-envelope.ts.

The application authentication contract rejected or could not establish the requested actor context. Follow the returned message and suggested fix. Use supported auth helpers in request context; do not manufacture actor headers or bypass role/freshness gates.

R402_AUTH_CSRF_TOKEN_MISMATCH

Owner: gateway:packages/gateway/src/utils/error-envelope.ts.

The application authentication contract rejected or could not establish the requested actor context. Follow the returned message and suggested fix. Use supported auth helpers in request context; do not manufacture actor headers or bypass role/freshness gates.

R402_AUTH_DOMAIN_NOT_ALLOWED

Owner: gateway:packages/gateway/src/utils/error-envelope.ts.

The application authentication contract rejected or could not establish the requested actor context. Follow the returned message and suggested fix. Use supported auth helpers in request context; do not manufacture actor headers or bypass role/freshness gates.

R402_AUTH_EMAIL_CODE_EXHAUSTED

Owner: gateway:packages/gateway/src/utils/error-envelope.ts.

The application authentication contract rejected or could not establish the requested actor context. Follow the returned message and suggested fix. Use supported auth helpers in request context; do not manufacture actor headers or bypass role/freshness gates.

R402_AUTH_EMAIL_CODE_INVALID

Owner: gateway:packages/gateway/src/utils/error-envelope.ts.

The application authentication contract rejected or could not establish the requested actor context. Follow the returned message and suggested fix. Use supported auth helpers in request context; do not manufacture actor headers or bypass role/freshness gates.

R402_AUTH_FETCH_ABSOLUTE_URL

Owner: gateway:packages/gateway/src/utils/error-envelope.ts, core:packages/functions/src/auth/errors.ts.

The application authentication contract rejected or could not establish the requested actor context. Follow the returned message and suggested fix. Use supported auth helpers in request context; do not manufacture actor headers or bypass role/freshness gates.

R402_AUTH_FRESHNESS_REQUIRED

Owner: gateway:packages/gateway/src/utils/error-envelope.ts, core:packages/functions/src/auth/errors.ts, core:packages/functions/src/auth/index.ts.

The application authentication contract rejected or could not establish the requested actor context. Follow the returned message and suggested fix. Use supported auth helpers in request context; do not manufacture actor headers or bypass role/freshness gates.

R402_AUTH_IDENTITY_LINK_CONFLICT

Owner: gateway:packages/gateway/src/utils/error-envelope.ts, core:packages/functions/src/auth/errors.ts.

The application authentication contract rejected or could not establish the requested actor context. Follow the returned message and suggested fix. Use supported auth helpers in request context; do not manufacture actor headers or bypass role/freshness gates.

R402_AUTH_INSUFFICIENT_MEMBERSHIP

Owner: gateway:packages/gateway/src/utils/error-envelope.ts, core:packages/functions/src/auth/errors.ts.

The application authentication contract rejected or could not establish the requested actor context. Follow the returned message and suggested fix. Use supported auth helpers in request context; do not manufacture actor headers or bypass role/freshness gates.

R402_AUTH_INSUFFICIENT_ROLE

Owner: gateway:packages/gateway/src/utils/error-envelope.ts, core:packages/functions/src/auth/errors.ts.

The application authentication contract rejected or could not establish the requested actor context. Follow the returned message and suggested fix. Use supported auth helpers in request context; do not manufacture actor headers or bypass role/freshness gates.

R402_AUTH_INVALID_BEARER

Owner: gateway:packages/gateway/src/utils/error-envelope.ts.

The application authentication contract rejected or could not establish the requested actor context. Follow the returned message and suggested fix. Use supported auth helpers in request context; do not manufacture actor headers or bypass role/freshness gates.

R402_AUTH_INVALID_CREDENTIALS

Owner: gateway:packages/gateway/src/utils/error-envelope.ts, core:packages/functions/src/auth/errors.ts.

The application authentication contract rejected or could not establish the requested actor context. Follow the returned message and suggested fix. Use supported auth helpers in request context; do not manufacture actor headers or bypass role/freshness gates.

R402_AUTH_MAGIC_LINK_INVALID

Owner: gateway:packages/gateway/src/utils/error-envelope.ts.

The application authentication contract rejected or could not establish the requested actor context. Follow the returned message and suggested fix. Use supported auth helpers in request context; do not manufacture actor headers or bypass role/freshness gates.

R402_AUTH_MEMBERSHIP_GATE_NOT_WIRED

Owner: core:packages/functions/src/auth/errors.ts.

The application authentication contract rejected or could not establish the requested actor context. Follow the returned message and suggested fix. Use supported auth helpers in request context; do not manufacture actor headers or bypass role/freshness gates.

R402_AUTH_OAUTH_HANDOFF_INVALID

Owner: gateway:packages/gateway/src/utils/error-envelope.ts.

The application authentication contract rejected or could not establish the requested actor context. Follow the returned message and suggested fix. Use supported auth helpers in request context; do not manufacture actor headers or bypass role/freshness gates.

R402_AUTH_PASSKEY_CHALLENGE_INVALID

Owner: gateway:packages/gateway/src/utils/error-envelope.ts.

The application authentication contract rejected or could not establish the requested actor context. Follow the returned message and suggested fix. Use supported auth helpers in request context; do not manufacture actor headers or bypass role/freshness gates.

R402_AUTH_PREFLIGHT_FAILED

Owner: public:sdk/src/node/actions-node.ts, public:cli/lib/deploy-v2.mjs.

The application authentication contract rejected or could not establish the requested actor context. Follow the returned message and suggested fix. Use supported auth helpers in request context; do not manufacture actor headers or bypass role/freshness gates.

R402_AUTH_PRERENDERED

Owner: public:astro/src/components/SignedIn.astro, public:sdk/src/node/source-scan.ts, gateway:packages/gateway/src/utils/error-envelope.ts, core:packages/functions/src/auth/errors.ts.

An auth helper ran during prerendering, where there is no request actor. Render the auth-dependent page through SSR or move the interaction to a supported client flow. Server islands are currently unsupported; server:defer is not a remedy.

R402_AUTH_REDUNDANT_USER_FILTER

Owner: public:sdk/src/node/source-scan.ts, gateway:packages/gateway/src/utils/error-envelope.ts, core:packages/functions/src/auth/errors.ts.

The application authentication contract rejected or could not establish the requested actor context. Follow the returned message and suggested fix. Use supported auth helpers in request context; do not manufacture actor headers or bypass role/freshness gates.

R402_AUTH_RENAMED_EXPORT

Owner: gateway:packages/gateway/src/utils/error-envelope.ts, core:packages/functions/src/auth/errors.ts.

The application authentication contract rejected or could not establish the requested actor context. Follow the returned message and suggested fix. Use supported auth helpers in request context; do not manufacture actor headers or bypass role/freshness gates.

R402_AUTH_REQUIRED

Owner: gateway:packages/gateway/src/utils/error-envelope.ts, core:packages/functions/src/auth/errors.ts.

The application authentication contract rejected or could not establish the requested actor context. Follow the returned message and suggested fix. Use supported auth helpers in request context; do not manufacture actor headers or bypass role/freshness gates.

R402_AUTH_RESERVED_EMAIL_DOMAIN

Owner: gateway:packages/gateway/src/utils/error-envelope.ts.

The application authentication contract rejected or could not establish the requested actor context. Follow the returned message and suggested fix. Use supported auth helpers in request context; do not manufacture actor headers or bypass role/freshness gates.

R402_AUTH_RETURN_TO_INVALID

Owner: gateway:packages/gateway/src/utils/error-envelope.ts, core:packages/functions/src/auth/errors.ts.

The application authentication contract rejected or could not establish the requested actor context. Follow the returned message and suggested fix. Use supported auth helpers in request context; do not manufacture actor headers or bypass role/freshness gates.

R402_AUTH_ROLE_GATE_NOT_CONFIGURED

Owner: core:packages/functions/src/auth/errors.ts.

The application authentication contract rejected or could not establish the requested actor context. Follow the returned message and suggested fix. Use supported auth helpers in request context; do not manufacture actor headers or bypass role/freshness gates.

R402_AUTH_SESSION_BRIDGE_UNVERIFIED

Owner: gateway:packages/gateway/src/utils/error-envelope.ts, core:packages/functions/src/auth/errors.ts.

The application authentication contract rejected or could not establish the requested actor context. Follow the returned message and suggested fix. Use supported auth helpers in request context; do not manufacture actor headers or bypass role/freshness gates.

R402_AUTH_SESSION_EXPIRED

Owner: gateway:packages/gateway/src/utils/error-envelope.ts.

The application authentication contract rejected or could not establish the requested actor context. Follow the returned message and suggested fix. Use supported auth helpers in request context; do not manufacture actor headers or bypass role/freshness gates.

R402_AUTH_SESSION_INVALID

Owner: gateway:packages/gateway/src/utils/error-envelope.ts.

The application authentication contract rejected or could not establish the requested actor context. Follow the returned message and suggested fix. Use supported auth helpers in request context; do not manufacture actor headers or bypass role/freshness gates.

R402_AUTH_SOURCE_SCAN_ERROR

Owner: public:sdk/src/node/source-scan.ts.

The application authentication contract rejected or could not establish the requested actor context. Follow the returned message and suggested fix. Use supported auth helpers in request context; do not manufacture actor headers or bypass role/freshness gates.

R402_AUTH_STATE_CHANGING_GET

Owner: public:sdk/src/node/source-scan.ts, gateway:packages/gateway/src/utils/error-envelope.ts.

The application authentication contract rejected or could not establish the requested actor context. Follow the returned message and suggested fix. Use supported auth helpers in request context; do not manufacture actor headers or bypass role/freshness gates.

R402_AUTH_TENANT_SUBJECT_INVALID

Owner: gateway:packages/gateway/src/utils/error-envelope.ts, core:packages/functions/src/auth/errors.ts.

The application authentication contract rejected or could not establish the requested actor context. Follow the returned message and suggested fix. Use supported auth helpers in request context; do not manufacture actor headers or bypass role/freshness gates.

R402_AUTH_TENANT_SUFFIX_REQUIRED

Owner: gateway:packages/gateway/src/utils/error-envelope.ts, core:packages/functions/src/auth/errors.ts.

The application authentication contract rejected or could not establish the requested actor context. Follow the returned message and suggested fix. Use supported auth helpers in request context; do not manufacture actor headers or bypass role/freshness gates.

R402_AUTH_UNKNOWN_EXPORT

Owner: public:sdk/src/node/source-scan.ts, gateway:packages/gateway/src/utils/error-envelope.ts, core:packages/functions/src/auth/errors.ts.

An unsupported auth namespace member or sentinel export was accessed. Follow the diagnostic’s canonical replacement, such as auth.user() or auth.requireUser(). Do not invent auth.getUser or auth.protect. The legacy top-level getUser(req) is a throwing sentinel too; replace it with auth.user() in the deployed request context.

R402_AUTH_UNKNOWN_IDENTITY

Owner: gateway:packages/gateway/src/utils/error-envelope.ts, core:packages/functions/src/auth/errors.ts.

The application authentication contract rejected or could not establish the requested actor context. Follow the returned message and suggested fix. Use supported auth helpers in request context; do not manufacture actor headers or bypass role/freshness gates.

R402_AUTH_UNTRUSTED_CONTEXT

Owner: gateway:packages/gateway/src/utils/error-envelope.ts, core:packages/functions/src/auth/errors.ts.

The application authentication contract rejected or could not establish the requested actor context. Follow the returned message and suggested fix. Use supported auth helpers in request context; do not manufacture actor headers or bypass role/freshness gates.