Class PasskeyGetTokenError

Error thrown when exchanging a passkey credential for tokens fails.

Unlike the challenge errors, this carries mfa_token / mfa_requirements on its cause when the server responds with mfa_required.

When identifier verification is required, isRetryable indicates whether the user entered a wrong OTP code. A retryable error means the caller should re-collect OTP codes for the identifiers in verificationRequired and retry getTokenByPasskey with the same credential and authSession. A non-retryable error is any other error, so check the error (for example with isMfaRequiredError) before starting a new flow.

Hierarchy

  • PasskeyError
    • PasskeyGetTokenError

Constructors

constructor

Properties

authSession? body? cause? code headers? isRetryable statusCode? verificationRequired?

Constructors

constructor

  • new PasskeyGetTokenError(message, cause?): PasskeyGetTokenError

  • Parameters

    • message: string
    • Optional cause: PasskeyGetTokenApiErrorResponse

    Returns PasskeyGetTokenError

Properties

Optional Readonly authSession

authSession?: string

The auth session token to use when retrying. Only present when isRetryable is true.

Optional body

body?: string

Raw response body text, when available.

Optional cause

cause?: PasskeyGetTokenApiErrorResponse

code

code: string

Optional headers

headers?: Headers

Response headers from the error response, when available. Native Fetch Headers.

Readonly isRetryable

isRetryable: boolean

true when Auth0 returned invalid_grant with an auth_session, meaning the session is still alive and the user can retry with corrected OTP codes. false for every other error, so check the error (for example with isMfaRequiredError) before starting a new flow.

Branch on this field — never on HTTP status code or error_description text, which are intentionally identical on retryable and terminal invalid_grant paths.

Optional statusCode

statusCode?: number

HTTP status code from the error response, when available.

Optional Readonly verificationRequired

verificationRequired?: ("email" | "phone")[]

Identifiers that still require a valid OTP code. Only present when isRetryable is true and the failure was due to a wrong OTP code.

Settings

Member Visibility

Theme

On This Page

constructorauthSessionbodycausecodeheadersisRetryablestatusCodeverificationRequired