Skip to content

HTTP 401

invalid_code

What to do: That code is wrong or has expired — request a new one.

POST /v1/auth/verify-code allows 3 attempts per code, and codes expire after 10 minutes. Call POST /v1/auth/request-code again for a fresh one.

Shape

{ "error": { "code": "invalid_code", "message": "…", "hint": "That code is wrong or has expired — request a new one.", "docs": "https://postbag.dev/docs/errors/invalid_code/" } }

All codes are listed on the error reference. Conventions for the envelope, hints and next[] are in the API overview.