Identity Apps API reference

Reference Identity runtime errors and routes used by IdentityAppClient.

Failures surface as CliodotApiError with code, status, and message. Common Identity codes:

Code Meaning
IDENTITY_TRUST_DENIED Target does not trust caller
IDENTITY_TOKEN_INVALID Bad access token
IDENTITY_TOKEN_EXPIRED Access expired
IDENTITY_TOKEN_REVOKED Access revoked
IDENTITY_REFRESH_REVOKED Refresh reuse / revoked
IDENTITY_FEATURE_NOT_LICENSED Advanced feature (e.g. JWKS, scopes) not on license
IDENTITY_SCOPE_DENIED Requested / stored scopes not granted
IDENTITY_SCOPE_INSUFFICIENT Online verify missing required_scopes
IDENTITY_SCOPE_INVALID Bad scope name / not in catalog
FEATURE_NOT_LICENSED Middleware license gate

Op Method Path Auth
Me GET /identity/v1/me App
Authenticate POST /identity/v1/authenticate App
Verify POST /identity/v1/verify App
Verify bound POST /identity/v1/apps/:appId/verify App
Refresh POST /identity/v1/token/refresh App
Revoke POST /identity/v1/token/revoke App
JWKS GET /identity/v1/apps/:appId/jwks.json None