API General Error Codes

These error codes are shared across the Fluz API. They cover authentication, phone and 2FA verification, passcodes, registration, and application access. Resource-specific failures have their own references — see Other error codes below.

How errors are returned

Most Fluz mutations return failures inside the response payload, not as top-level GraphQL errors. Each error carries a stable code and a human-readable message:

{
  "data": {
    "registerUser": {
      "success": false,
      "error": {
        "code": "AUTH-0026",
        "message": "The phone number you chose is already in use."
      }
    }
  }
}
📘

Branch on code, not message

Always check the operation's success (or status) field and read the error object when it indicates failure. Treat the code as the stable identifier in your logic — the message is user-facing copy and may change. The exact field names vary by operation, so check each endpoint's reference.

Authentication & login

ErrorCodeMessageHow to resolve
INVALID_ACCOUNTAUTH-0001Your account does not have the right permission to login to this portal. Please Apply for an Enterprise Account.The account isn't permissioned for this portal. Request Enterprise / developer access from Fluz.
INVALID_CREDENTIALSAUTH-0002Incorrect auth details.Verify the credentials being submitted, then re-authenticate.
INVALID_USER_ACCESSAUTH-0008Invalid user access.The user access token is missing, invalid, or not permitted for this action. Regenerate the token and retry.
INVALID_PASSWORDAUTH-0009The provided password is not valid.Re-enter the password; confirm it meets requirements.
SOCIAL_UNABLE_TO_LOGINAUTH-0013Unable to login with your social account. Please verify your credentials and try again or contact customer support.Re-attempt the social sign-in; if it persists, contact support.
TRADITIONAL_UNABLE_TO_LOGINAUTH-0018Unable to login with your account. Please verify your credentials and try again or contact customer support.Verify credentials and retry; if it persists, contact support.
INVALID_JWTAUTH-0019Invalid JWT Token!The access token is expired or malformed. Refresh the token and retry.
UNABLE_TO_CHANGE_PASSWORDAUTH-0023Unable to change password. Please try again or contact customer support.Transient failure — retry; if it persists, contact support.
UNABLE_TO_RESET_PASSWORDAUTH-0028Unable to reset password.Retry the reset; if it persists, contact support.

Phone & 2FA verification

ErrorCodeMessageHow to resolve
PHONE_NUMBER_NOT_FOUNDAUTH-0003Unable to find provided phone number or phone number it is not verified. Please select different method or contact customer support.Confirm the number is registered and verified, or use another method.
INVALID_PHONE_NUMBERAUTH-0004Invalid phone number.Check the number format and that regionCode matches it (e.g. US). See User Registration.
INVALID_2FA_TOKENAUTH-0005Access denied or expired.The 2FA token is wrong or expired. Request a new code and retry.
INCORRECT_AUTH_CODEAUTH-0006Auth code provided is incorrect, please check and re-enter received code and try again.Re-enter the code from the SMS; resend if needed.
UNABLE_TO_SEND_AUTH_CODEAUTH-0007Sorry, we were unable to send the auth code, please try again or contact customer support.Transient send failure — retry; if it persists, contact support.
UNABLE_TO_RESEND_2FAAUTH-0020Unable to re-send 2FA!Wait briefly, then request the code again.
UNSUPPORTED_PHONE_NUMBERAUTH-0021Provided number is not a valid mobile phone number! Please contact support for more details.Use a valid mobile number (landline / VoIP numbers aren't supported).
UNVERIFIED_PHONE_NUMBERAUTH-0024Your phone number requires verification. Please contact support.The number must be verified before this action. Complete verification or contact support.
SECURITY_CODE_EXPIREDAUTH-0029Your 6-digit security code has expired. Please resend a new code.Request a fresh code and submit it before it expires.

Passcode (PIN)

ErrorCodeMessageHow to resolve
NO_PIN_EXISTSAUTH-0010There is no passcode set on the user, please create one instead.No passcode is set — call the create-passcode flow instead of update/check.
PIN_ALREADY_SETAUTH-0011There is already a passcode set on the user, please reset instead.A passcode already exists — reset it rather than creating a new one.
INVALID_PIN_CODEAUTH-0012The provided passcode does not match our records, please try again or reset your passcode.Re-enter the passcode; reset it if the user has forgotten it.
UNABLE_TO_CREATE_PINAUTH-0014Unable to create new pass-code, please try again or contact customer support.Transient failure — retry; if it persists, contact support.
UNABLE_TO_CHECK_PINAUTH-0015Unable to check pass-code, please try again or contact customer support.Transient failure — retry; if it persists, contact support.
UNABLE_TO_UPDATE_PINAUTH-0016Unable to update pass-code, please try again or contact customer support.Transient failure — retry; if it persists, contact support.
UNABLE_TO_RESET_PINAUTH-0017Unable to reset pass-code, please try again or contact customer support.Transient failure — retry; if it persists, contact support.

Registration

ErrorCodeMessageHow to resolve
REGISTRATION_NOT_ALLOWEDAUTH-0022Registration not allowed, please contact customer support!Your application isn't permitted to register users. Contact Fluz to enable it — see User Registration.
UNSUCCESSFUL_REGISTRATIONAUTH-0025Please try again again or contact support.General registration failure — retry; if it persists, contact support.
REGISTRATION_PHONE_TAKENAUTH-0026The phone number you chose is already in use.The phone number is tied to an existing account. Use a different number.
REGISTRATION_EMAIL_TAKENAUTH-0027The email address you chose is already in use.The email is tied to an existing account. Use a different email.

Application & scopes

ErrorCodeMessageHow to resolve
APPLICATION_INACTIVEAUTH-0030Your application is not active.The application is inactive. Check its status in the dashboard — see Managing Application.
INVALID_SCOPEAUTH-0031The requested scopes must be granted by the user first.The user hasn't granted the requested scope. Have them authorize it — see Application Scopes.

Other error codes

These general codes don't cover resource-specific failures. For those, see:


Want to learn more? Contact us at [email protected]

Speak with our experts for more info or to request a demo.