Codes and events
HTTP status
The HTTP status indicates the class of the result. The exact code depends on the flow and the environment configuration.
| Status | Meaning | What to do |
|---|---|---|
200 | Operation completed. | — |
206 | The login requires an MFA step. | Complete the challenge through linkURL. See Complete MFA. |
302, 307 | Redirect, common in SSO flows. | Follow the redirect in the browser. |
400 | Invalid request, parameter, link, or grant. | Check the required fields and the values sent. |
401 | Credential or token not accepted. | Authenticate again and retry the call. |
403 | Access denied: permission, operational rule, unauthorized provider, or host different from the configured one. | Check the host and the access rules. |
404 | File, link, or resource not found. | Check that the file is still available and that the link has not expired. |
405 | HTTP method not accepted by the route. | Use one of the methods listed in the reference. |
503 | External validation service unavailable, for example Cloudflare Turnstile at sign-in. | Try again; if it persists, contact the administrator. |
Error format
The format of the error body varies between endpoints. Do not rely on a single JSON structure: handle the HTTP status first and, when present, use the returned description.
Token issuance errors
/auth/token and /oauth2/token respond 400 with the OAuthError model:
{
"error": 400,
"error_description": "<reason>",
"error_uri": "<api-uri>"
}The numeric value of error describes the condition reported by the validation.
Session and transfer events
Operations generate start and end events. The identifiers below help you interpret report records and the records exported by the environment.
| Code | Event | When |
|---|---|---|
0 | STCPEVTSTARTSESSIONIN | Start of an authenticated inbound session. |
1 | STCPEVTENDSESSIONIN | Explicit end of the session. |
6 | STCPEVTSTARTRECEIVEFILE | Start of receiving a file (upload). |
7 | STCPEVTENDRECEIVEFILE | Completion of the upload processing. |
4 | STCPEVTSTARTSENDFILE | Start of sending a file (download). |
5 | STCPEVTENDSENDFILE | Completion of the file sending. |
In the report (/report), filterdirection=5 selects STCPEVTENDSENDFILE events (completed downloads) and filterdirection=7 selects STCPEVTENDRECEIVEFILE events (completed uploads).
Note
The start record does not guarantee that the operation completed. A failure during processing can generate the start event without the corresponding end event.