Error responses

An HTTP response indicates the type of error that has occurred when an action in an authorization process fails. The error responses described here are only applicable to Policy Enforcement Point (PEP) error responses.

For more information about OAuth 2.0 error responses for other endpoints, see the OAuth website: http://www.oauth.net.

In some circumstances, the following HTTP error responses must be returned to the client:

400 Bad Request
401 Unauthorized
502 Bad Gateway

For the 401 response, an additional WWW-Authenticate header is added to the response in the following format:

WWW-Authenticate: OAuth realm = <realm-name>

The HTML component of the responses is preinstalled from files that have been specified in the EAS configuration.

See the WebSEAL Administration Guide for details on how to configure response template files for the OAuth EAS.