Optionalcause: PasskeyGetTokenApiErrorResponseOptional ReadonlyauthThe auth session token to use when retrying. Only present when isRetryable
is true. Never included in the message or toJSON().
Optional ReadonlycauseReadonlyerrorReadonlyerror_Readonlyistrue when Auth0 returned invalid_grant with an auth_session, meaning
the session is still alive and the user can retry with corrected OTP codes.
false for every other error, so check the error before starting a new flow.
Branch on this field — never on HTTP status code or error_description text,
which are intentionally identical on retryable and terminal invalid_grant paths.
Optional ReadonlyverificationIdentifiers that still require a valid OTP code. Only present when isRetryable
is true and the failure was due to a wrong OTP code.
Thrown when passkey token exchange (POST /oauth/token with WebAuthn grant) fails.
Common causes:
isRetryable)When identifier verification is required,
isRetryableindicates whether the user entered a wrong OTP code. A retryable error means the caller should re-collect OTP codes for the identifiers inverificationRequiredand retry with the same credential andauthSession. A non-retryable error is any other error, so check the error before starting a new flow. Atoo_many_requestsor server error can succeed later.