Skip to content

Codes and events

HTTP status

The HTTP status indicates the class of the result. The exact code depends on the flow and the environment configuration.

StatusMeaningWhat to do
200Operation completed.—
206The login requires an MFA step.Complete the challenge through linkURL. See Complete MFA.
302, 307Redirect, common in SSO flows.Follow the redirect in the browser.
400Invalid request, parameter, link, or grant.Check the required fields and the values sent.
401Credential or token not accepted.Authenticate again and retry the call.
403Access denied: permission, operational rule, unauthorized provider, or host different from the configured one.Check the host and the access rules.
404File, link, or resource not found.Check that the file is still available and that the link has not expired.
405HTTP method not accepted by the route.Use one of the methods listed in the reference.
503External validation service unavailable, for example Cloudflare Turnstile at sign-in.Try again; if it persists, contact the administrator.

Error format

The format of the error body varies between endpoints. Do not rely on a single JSON structure: handle the HTTP status first and, when present, use the returned description.

Token issuance errors

/auth/token and /oauth2/token respond 400 with the OAuthError model:

{
  "error": 400,
  "error_description": "<reason>",
  "error_uri": "<api-uri>"
}

The numeric value of error describes the condition reported by the validation.

Session and transfer events

Operations generate start and end events. The identifiers below help you interpret report records and the records exported by the environment.

CodeEventWhen
0STCPEVTSTARTSESSIONINStart of an authenticated inbound session.
1STCPEVTENDSESSIONINExplicit end of the session.
6STCPEVTSTARTRECEIVEFILEStart of receiving a file (upload).
7STCPEVTENDRECEIVEFILECompletion of the upload processing.
4STCPEVTSTARTSENDFILEStart of sending a file (download).
5STCPEVTENDSENDFILECompletion of the file sending.

In the report (/report), filterdirection=5 selects STCPEVTENDSENDFILE events (completed downloads) and filterdirection=7 selects STCPEVTENDRECEIVEFILE events (completed uploads).

Note

The start record does not guarantee that the operation completed. A failure during processing can generate the start event without the corresponding end event.