Skip to content
Last updated

Validation error codes

The following lists compile validation error codes you may encounter when interacting with Frontegg APIs. These errors are returned when request inputs fail validation checks, such as missing required fields, incorrect data types, or values that don't meet format constraints.

The error codes are grouped by the area of the API they relate to. Use the links below to jump directly to the relevant category:

User

Error codeError message
ER-0005eb4672name must be a string
ER-00062905abeach value in userIds must be a string
ER-000a64f544Either email or username must be provided
ER-000b32220fphoneNumber should not be empty
ER-000e4dacd0each value in emails must be an email
ER-001726e719lastName must be a string
ER-00196e133eusers.0.email must be an email
ER-001a109c8bname should not be empty
ER-001c3df1e0User ID must be a valid id
ER-001e4c0b87profileImage must be base64 encoded
ER-00295bc55eEither emails or username must be provided
ER-002cc969b1user.email must be an email
ER-002fef5d32allowEmailChange must be a boolean value
ER-003d012f5bEmail is required when username is not provided
ER-003d4a1e20firstName must be a string
ER-0037f547f7Username is required when email is not provided.
ER-0041b0b295user must be an object
ER-00474568dfUsername contains invalid characters
ER-00492bf651Username can only contain letters, numbers, dots, underscores, and hyphens
ER-004a5c1ae5email must be a string
ER-00524fe038users.0.emails.0.email should not be empty
ER-005a0fec63Phone number must be valid
ER-0066e18598newPassword should not be empty
ER-006899abd0users.0.emails.0.primary must be a boolean value
ER-00714eaa40changePhoneId should not be empty
ER-0078def8e8changePhoneNumberToken must be a string
ER-00811bd860profileImage must be a string
ER-0081db7a24newPassword must be a string
ER-0082b0f4d0userId should not be empty
ER-0083fa2c70resetPhoneNumberToken should not be empty
ER-008897167dpassword should not be empty
ER-0088eff9e2users.0.emails.0.email must be an email
ER-008bcb1872each value in userIds should not be empty
ER-0097c03b1fchangePhoneId must be a string
ER-009c478740email must be an email
ER-009ec0aa9auserEmail should not be empty
ER-00a5247e65emails.0.email should not be empty
ER-00a5298e4cuserIds must contain no more than 1000 elements
ER-00ad24c82duser.name should not be empty
ER-00ae7c8020Emails must be an array when provided
ER-00afeb4d58each value in emails should not be empty
ER-00b172d2f2phoneNumberType possible values are: auth,mfa
ER-00b30c4875Emails array cannot be empty when provided
ER-00b89bc9ebusers.0.Username contains invalid characters
ER-00ba975421users must contain at least 1 elements
ER-00bdfaa2eausers.0.tenantId must be a string
ER-00c5c97728userEmail must be a string
ER-00c68d6a30userId must be a UUID
ER-00ccbefbb2users.0.email should not be empty
ER-00d243a91dresetPhoneNumberToken must be a string
ER-00d970b2c9users must contain no more than 1000 elements
ER-00d98f8a1bemails.0.email must be an email
ER-00ddabbdb5userIds must be an array
ER-00def1266eeach value in emails must be a string
ER-00e0ee0f11emails.0.primary must be a boolean value
ER-00e2f39183userIds must contain no more than 200 elements
ER-00e69e6530userId must be a string
ER-00e75ab156email should not be empty
ER-00ed8b0d49changePhoneNumberToken should not be empty
ER-00f14008d2userIds must contain at least 1 elements
ER-00f4e74f27password must be a string
ER-00f7f5779beach value in userIds must be a UUID
ER-00fb342d4auser.name must be a string
ER-00fc14e400primary must be a boolean value
ER-00fcefda45users must be an array
ER-00fd528b8eeach value in emails must be shorter than or equal to 100 characters

Authentication and login

Error codeError message
ER-0005cb3f61syncOnLogin must be a boolean value
ER-000d7fda63strategy possible values are: email,sms
ER-000f4f27baIdentifier type is missing.
ER-000ffac481strategy possible values are: code,link
ER-001cc24f5alogin.url must be a valid url.
ER-001ddd341bidentifierType must be one of the following values: email, phoneNumber, username
ER-002ca1674fidentifierType must be a string
ER-002d46a90bidentifier should not be empty
ER-0034b144b8strategy possible values are: EmailAndPassword,MagicLink,Code,NoLocalAuthentication,SmsCode,UsernameAndPassword,UsernameAndMagicLink,UsernameAndCode,UsernameAndSms
ER-00306abbcfidentifier must be a string
ER-00589c325blogin must be an object
ER-00740944c4strategy possible values are: email,phoneNumber,username
ER-007b2f9a90strategy possible values are: WebAuthnPlatform,WebAuthnCrossPlatform,SmsCode,SmsCodeV2,Passkeys,UsernameAndPassword,UsernameAndMagicLink,UsernameAndCode,UsernameAndSms
ER-009d66513aidentifierType should not be empty
ER-00bd564528code must be a string
ER-00ea9e3ccaauthStrategy possible values are: EmailAndPassword,MagicLink,Code,NoLocalAuthentication,SmsCode,UsernameAndPassword,UsernameAndMagicLink,UsernameAndCode,UsernameAndSms
ER-004945a07btype must be one of the following values: google, github, microsoft, facebook, linkedin, gitlab, slack, twitter, apple

MFA

Error codeError message
ER-000594d81bclientDataJSON should not be empty
ER-000dbc9a2amfaToken must be a string
ER-000b32100coptions.response.attestationObject must be a string
ER-0037274a28mfaToken should not be empty
ER-001a35ceb8response.authenticatorData should not be empty
ER-001a801413signature must be a string
ER-001adc4719webauthnToken must be a string
ER-001f174670options.response.signature must be a string
ER-002ebffe71codePayload should not be empty
ER-003d02a29eoptions.response.attestationObject should not be empty
ER-0048ef13bcauthenticationApp.active must be a boolean value
ER-004febbc4cauthenticationApp.active must be a boolean. If active is true, serviceName must be defined
ER-00512827fdresponse.authenticatorData must be a string
ER-0055f68b76recoveryCode must be a string
ER-00560d634cattestationObject should not be empty
ER-00562d2a9dcode should not be empty
ER-005c56917fattestationObject must be a string
ER-006bdcc12dstrategy possible values are: AuthenticatorApp,WebAuthnPlatform,WebAuthnCrossPlatform,SMS,EmailCode
ER-0072076d4doptions.response.clientDataJSON should not be empty
ER-00771464c8response.clientDataJSON must be a string
ER-008568f611authenticatorData should not be empty
ER-008ccc308cotcToken must be a string
ER-009240c7a0generatedVerification must be a string
ER-009a4c05e6response must be an object
ER-009a5de89aoptions.response.signature should not be empty
ER-00945a3be4response.signature must be a string
ER-00964c1731response.attestationObject must be a string
ER-0093afcc70otcToken should not be empty
ER-00b6113b0fwebauthnToken should not be empty
ER-00b9d78aecoptions.response.authenticatorData must be a string
ER-00c07c38ceresponse.clientDataJSON should not be empty
ER-00c1638143authenticationApp.active should not be empty
ER-00c65e588bdeviceType possible values are: Platform,CrossPlatform
ER-00c7c21871codePayload must be a string
ER-00c9d25be9signature should not be empty
ER-00cca05205clientDataJSON must be a string
ER-00cda9f768options.response.clientDataJSON must be a string
ER-00d8732848generatedVerification should not be empty
ER-00dd4dac52authenticatorData must be a string
ER-00ef80948eresponse.attestationObject should not be empty
ER-00f0ad28f3options.response.authenticatorData should not be empty

Session management

Error codeError message
ER-000c886322sessionIdleTimeoutConfiguration.isActive must be a boolean value
ER-003c908360sessionIdleTimeoutConfiguration.timeout must not be greater than 2073600
ER-004ff13f99timeout must not be less than 60
ER-0069fb4f5fsessionIdleTimeoutConfiguration.timeout must be a number conforming to the specified constraints
ER-007c71157bsessionId must be a string
ER-009f644345maxSessions must not be less than 1
ER-009f7c0ba2cookieSameSite must be one of these values: STRICT,LAX,NONE
ER-009c8ecd0bsessionTimeoutConfiguration.timeout must be a number conforming to the specified constraints
ER-00841aa823timeout must not be greater than 2073600
ER-00908c27b7sessionTimeoutConfiguration.isActive must be a boolean value
ER-00a97c4d2fmaxSessions must be a number conforming to the specified constraints
ER-00b6194be1sessionId should not be empty
ER-00c227cc88timeout must be a number conforming to the specified constraints
ER-00cc8875edsessionTimeoutConfiguration.timeout must not be less than 60
ER-00de949061sessionIdleTimeoutConfiguration.timeout must not be less than 60
ER-00f10d0c36sessionConcurrentConfiguration.isActive must be a boolean value
ER-00fe10eaa0sessionConcurrentConfiguration.maxSessions must be a number conforming to the specified constraints
ER-0081c96186sessionConcurrentConfiguration.maxSessions must not be less than 1

Tokens and OAuth

Error codeError message
ER-000e8b35ccuserInfoUrl must be a string
ER-0011816c7ftoken must be a string
ER-0014959801redirect_uris should not be empty
ER-001725862aoauth2Config.authorizationUrl should not be empty
ER-0017baf197oauth2Config.authorizationUrl must be a string
ER-001929a78bgrant_type must be one of the following values: authorization_code, refresh_token, client_credentials, urn:ietf:params:oauth:grant-type:token-exchange, urn:ietf:params:oauth:grant-type:device_code
ER-00219e01cbredirect_uris must be an array
ER-0024ff1f5foauth2Config.userInfoUrl must be a string
ER-002fab3c54redirectURL must be an URL address
ER-003d207141scopes must be a string
ER-004be294e1token must be a UUID
ER-0048496048oidcClientId must be a string
ER-0054a3de4ftokenUrl must be a URL address
ER-005e5d156eredirectUrl should not be empty
ER-0060e6ba8dtokenUrl must be a string
ER-0063b206ccgrant_type should not be empty
ER-00659e62b9expirationInSeconds must be a number conforming to the specified constraints
ER-006df9ac77clientName must be a string
ER-007527e076claims.tenantId must be a string
ER-007d35ffd0scopes should not be empty
ER-0075c53b6cclientType must be one of the following values: Agent
ER-00762b71c9clientId must be a string
ER-0079484375state must be a string
ER-008be51424redirect_uris must contain at least one URI
ER-0088f1d129refreshToken must be a string
ER-00866fc417userInfoUrl should not be empty
ER-00894c742eexpirationInSeconds must not be less than 300
ER-008ed7931coauth2Config.tokenUrl must be a string
ER-0091a5ba6bactorToken must be a string
ER-009e4f8db5subject_token_type should not be empty
ER-00a3774b9asubject_token should not be empty
ER-00a6917706authorizationUrl must be a URL address
ER-00a784374dredirectUrl must be a URL address
ER-00b3ddcfd0grant_type must be equal to urn:ietf:params:oauth:grant-type:token-exchange
ER-00b6a5ad38redirectUrl must be a valid url.
ER-00b73a6516authorizationUrl must be a string
ER-00b8db8e01each value in redirect_uris must be a string
ER-00c2e08d60token should not be empty
ER-00c336cfb1clientType should not be empty
ER-00cb34e0c7authorizationUrl should not be empty
ER-00d53dc69auserInfoUrl must be a URL address
ER-00d6dfadb4wellknownUrl should not be empty
ER-00da4d64e9oauth2Config.tokenUrl should not be empty
ER-00e25b565dtokenUrl should not be empty
ER-00e2050075expiration must be a number conforming to the specified constraints
ER-00e2ffea0foauth2Config.userInfoUrl should not be empty
ER-00e47276eeclient_id is required for device_code grant type
ER-00f1082ff3expiration should not be empty
ER-00f5f0efb9clientId should not be empty
ER-00f6da19e5wellknownUrl must be a string
ER-00f960d1b9expiration must not be greater than 15552000
ER-00fc17143aeach value in redirect_uris must be a URL address
ER-0096fbf523expiration must not be less than 10
ER-009f263bc0strategy possible values are: ALLOW,BLOCK
ER-00981a2834clientName should not be empty

SSO and SAML

Error codeError message
ER-000b68d815idpCertificate should not be empty
ER-001be4afe3acsUrl must be a URL address
ER-001d88d11assoConfigId must be a UUID
ER-0023efaacesignRequest must be a boolean value
ER-0052b443c0idpSsoUrl must be a string
ER-006dbfdcf9ssoEndpoint must be a string
ER-0067eb7662signRequest should not be empty
ER-008889e7f7spEntityId must be a string
ER-008ff2c8a0idpSsoUrl should not be empty
ER-009549c72cpublicCertificate must be a string
ER-009d50b9a7acsUrl must be a string
ER-00a25677b7entityId should not be empty
ER-00abc96484entityId must be a string
ER-00b356e286ssoEndpoint must be a URL address
ER-00bda00552ssoConfigId should not be empty
ER-00cea58b7cidpEntityId must be a string
ER-00dd9cd573idpCertificate must be a string
ER-00f40bb1fdssoConfigId must be a string
ER-00f83471fdidpEntityId should not be empty

Tenant and organization

Error codeError message
ER-00041b523dtargetTenantId must be a string
ER-000835708fusers.0.tenantId should not be empty
ER-001023d6f2tenantId must be a string
ER-0033686570subTenantsRoles must contain at least 1 elements
ER-003963a25csubTenantsRoles.0.tenantId should not be empty
ER-003f3b800asubTenantsRoles.0.roleIds must contain at least 1 elements
ER-005ac941a0claims.tenantId should not be empty
ER-007527e076claims.tenantId must be a string
ER-007b3e5e3esubTenants.0.tenantId should not be empty
ER-00746054eftenantConfig must be a non-empty object
ER-0079c31adasubTenantsRoles.0.each value in roleIds should not be empty
ER-0083d1d518tenant must be an object
ER-00a2847cf2subTenantsRoles.0.roleIds must be an array
ER-00ab09b0fesubTenantsRoles must be an array
ER-00c450de34subTenantsRoles.0.tenantId must be a string
ER-00cc64747fcompanyName should not be empty
ER-00d826826asubTenants.0.tenantId must be a string
ER-00dd8e83a0subTenants must be an array
ER-00eda32cffsubTenantsRoles.0.each value in roleIds must be a string
ER-00ee5bb77ctenantId should not be empty
ER-00ef3dbdd4targetTenantId should not be empty
ER-00eecaed4dactiveApplicationTenants.0.tenantId must be a string
ER-00f99d8ea4companyName must be a string
ER-00fc35a0bfsubTenants must contain at least 1 elements

Roles, permissions, and groups

Error codeError message
ER-0018245401group must be a string
ER-001b319a8agroupsIds must contain at least 1 elements
ER-001c6881c0each value in roleIds must be a string
ER-002fc9ea16baseRoleId should not be empty
ER-003af0a8c2each value in permissionIds must be a string
ER-003be9aac6group should not be empty
ER-003cddd8f5permissionIds should not be empty
ER-0037e060e5roleIds must contain at least 1 elements
ER-004b1fa357roleIds should not be empty
ER-005532d399groupsIds must contain no more than 100 elements
ER-005991942ceach value in groupsIds must be a string
ER-00603ec410baseRoleId must be a string
ER-007db615b6At least one of [roleKeys, emails, phoneNumbers, groupIds] must be a non-empty array.
ER-00a93461abclaims.permissions must be an array
ER-00aee3bc7aeach value in roleIds should not be empty
ER-00bf7fd9b5type must be one of the following values: NEVER, ALWAYS, ASSIGNABLE
ER-00c61e9cc4At least one of addRoleIds or removeRoleIds must be provided with values
ER-00cf030f4deach value in permissions must be a string
ER-00d59da80egroupsIds must be an array
ER-00d76fd74droleIds must be an array
ER-00d87b2e88permissions must be an array
ER-00e10948e2permissionIds must contain at least 1 elements
ER-00e46b0786claims.each value in permissions must be a string
ER-00e89625c6each value in permissionIds should not be empty
ER-00f0bec6d3permissionIds must be an array

Applications

Error codeError message
ER-00026add3bactiveApplicationTenants must contain no more than 50 elements
ER-0004f0e932appIds must contain at least 1 elements
ER-000dbbb81dappId should not be empty
ER-0052b2354aactiveApplicationTenants.0.applicationId must be a string
ER-0053b2b12cappId must be a string
ER-0054153140activeApplicationTenants must be an array
ER-005452581fapplicationId must be a string
ER-00592bcc48each value in appIds should not be empty
ER-006ac8b0acactiveApplicationTenants must contain at least 1 elements
ER-009affbcd9each value in appIds must be a string
ER-00cac26126appIds must be an array
ER-00d3c3163fappIds must contain no more than 50 elements
ER-00e1e776c7appIds must contain no more than 1000 elements

Security policies

Error codeError message
ER-004c76c145type possible values are: ALLOW,BLOCK
ER-004d29a02dip must be one of: IPv4, IPv6, CIDR
ER-00a0fe0f35ips.0.strategy possible values are: ALLOW,BLOCK
ER-00d7f555e2ips must be an array
ER-00ff6e6508ips.0.ip must be one of: IPv4, IPv6, CIDR

General

Error codeError message
ER-0003108d69enabled should not be empty
ER-0003fc0a62allowAccess must be a boolean value
ER-0004074b3aeach value in ids should not be empty
ER-00050c3aa3status must be a number conforming to the specified constraints
ER-00058160ffprovider must be one of the following values: sendgrid, mailgun, ses, ses-role
ER-000677b376message must be an array
ER-00069b1ffcregion should not be empty
ER-0008fae20fvalidated must be a boolean value
ER-0009897417rules.0.conditionLogic must be one of the following values: and
ER-0009a1875benabled must be a boolean value
ER-000c10841aconditions.0.Only listed attributes are allowed: userId, applicationId, tenantId, roleIds, tokenType, userEmail
ER-000c3ba292type should not be empty
ER-00106458e4active should not be empty
ER-00120328ebconditions.0.value must be an object
ER-001293224aentity should not be empty
ER-001629de10id must be a UUID
ER-00175b71f2keyId should not be empty
ER-0018ec5ac8channels.sms must be a boolean value
ER-001b0c125fsms must be a boolean value
ER-0026d5556bvalue must be an object
ER-002c46e5deAt least one of channel options must be true
ER-002e1ad53dalgorithm should not be empty
ER-003c463ef6options.id must be a string
ER-003e57d364url must be a valid url.
ER-004073e800rules.0.conditions.0.value must be an object
ER-0040973b3fpayload must be an object
ER-0044cc6287metadata should not be empty
ER-0045d48c32displayName should not be empty
ER-00498fe6b1rules.0.conditions.0.Only listed attributes are allowed: userId, applicationId, tenantId, roleIds, tokenType, userEmail
ER-004ecab5dceach value in ids must be a string
ER-004ee0f826op must be one of the following values: in_list, contains, ends_with
ER-00544d4a6beach value in ids must be shorter than or equal to 100 characters
ER-0055ad2325value should not be empty
ER-0056461c79url should not be empty
ER-0056b1c624Only listed attributes are allowed: userId, applicationId, tenantId, roleIds, tokenType, userEmail
ER-005a058c31channels.email must be a boolean value
ER-005b0a7f70domain must be a string
ER-005cf194e5conditions.0.op must be one of the following values: in_list, contains, ends_with
ER-0060aec68bprovider must be a string
ER-006507fc3epayload should not be null or undefined
ER-006a3db6dfemail.active must be a boolean. If active is true, sender & tokenLifetimeSeconds must be defined
ER-006a960987message must contain at least 1 elements
ER-006ba3843cconditions must be an array
ER-006c7b2f4eregion must be a string
ER-006d47f127sms.active should not be empty
ER-006da876caemail must be a boolean value
ER-00674d1cf0keyId must be a string
ER-007dfebcffdisplayName must be a string
ER-007e962c71email.active must be a boolean value
ER-0077216a23negate must be a boolean value
ER-008b161b77active must be a boolean value
ER-0082f5f98eids must contain at least 1 elements
ER-0087abc452email.active should not be empty
ER-00991d4a07apiKey must be a string
ER-0099d10788region must be one of the following values: us, eu
ER-009a11272eids must be an array
ER-009c015a70domain must be valid
ER-009e0e5b62id must be a string
ER-00a3007037domain must be a valid domain name
ER-00a793a752domain should not be empty
ER-00aacafe23url must be a URL address
ER-00ac824e5fmetadata must be a string
ER-00b2509649apiKey should not be empty
ER-00b33d78devalidated should not be empty
ER-00bd19af0cclaims must be an object
ER-00be44ef10metadata must be a json string
ER-00c137fa5esms.active must be a boolean. If active is true, tokenLifetimeSeconds must be defined
ER-00c3a2d89foptions.id should not be empty
ER-00c5ddc571Only one of ids or emails can be provided, not both.
ER-00c70154ebconditionLogic must be one of the following values: and
ER-00cdb966acurl is neither URL, nor domain name.
ER-00db87b898channels.At least one of channel options must be true
ER-00ddb85f2foptions must be an object
ER-00dfc67e6dconditions.0.negate must be a boolean value
ER-00e00efa88each value in message must be a string
ER-00e47ba0fbid should not be empty
ER-00ee686d28rules.0.conditions.0.op must be one of the following values: in_list, contains, ends_with
ER-00ee71ae58configuration must be an object
ER-00ef5efcf4payload should not be empty
ER-00efbee929ids must contain no more than 250 elements
ER-00f49b36e9channels should not be empty
ER-00f689ad6epayload must be a string
ER-00f9c6c6d1rules.0.conditions.0.negate must be a boolean value

Error codes customization

You can customize the error messages above and create a tailored user experience for your customers. Read more about localization here.