The response MUST use application/json as the content type and MUST include the following parameters:
error. The error code.
error_description. Text in human-readable form providing further details to clarify the nature of the error encountered.
errors example format:
HTTP/1.1 400 Bad Request
Content-Type: application/json
Cache-Control: no-cache, no-store
{
"error": "invalid_request",
"error_description":
"The redirect_uri is not valid for the given client"
}
also e authorization server MUST only accept requests complying with the definition given in Section 3 and MUST refuse any other request with HTTP status code 400 and error code invalid_request.In addition to the above, the PAR endpoint can also make use of the following HTTP status codes:
405:
If the request did not use the POST method, the authorization server responds with an HTTP 405 (Method Not Allowed) status code.
413:
If the request size was beyond the upper bound that the authorization server allows, the authorization server responds with an HTTP 413 (Payload Too Large) status code.
429:
If the number of requests from a client during a particular time period exceeds the number the authorization server allows, the authorization server responds with an HTTP 429 (Too Many Requests) status code.
As per https://datatracker.ietf.org/doc/html/rfc9126.html#section-2.3
The response MUST use
application/json
as the content type and MUST include the following parameters:errors example format:
also e authorization server MUST only accept requests complying with the definition given in Section 3 and MUST refuse any other request with HTTP status code 400 and error code invalid_request.In addition to the above, the PAR endpoint can also make use of the following HTTP status codes:
405: If the request did not use the POST method, the authorization server responds with an HTTP 405 (Method Not Allowed) status code.
413: If the request size was beyond the upper bound that the authorization server allows, the authorization server responds with an HTTP 413 (Payload Too Large) status code. 429: If the number of requests from a client during a particular time period exceeds the number the authorization server allows, the authorization server responds with an HTTP 429 (Too Many Requests) status code.