OAuth 2.0 error code
OAuth 2.0 error code: invalid_client
As text you can copy
invalid_client - Kind
- Error code
- Where you meet it
- In the error field of a reply, or in the WWW-Authenticate header
What does invalid_client mean in OAuth 2.0?
Client authentication failed: the client is unknown, no client authentication was included, or the method used is not supported. The server may answer with HTTP 401, and must do so when the client tried to authenticate through the Authorization header.
Risk warning: CFDs and spread bets are complex instruments and come with a high risk of losing money rapidly due to leverage. You can lose money on these products, and each provider publishes its own loss figure under FCA rules. You should consider whether you understand how they work and whether you can afford to take the high risk of losing your money. Automated and API trading can amplify losses through bugs, connectivity failures and runaway orders.
What it means in trading API work
The application's own identity was refused, not the user's. The client id or client secret is wrong, belongs to another environment, or was sent in a way the server does not accept.
This part is this site's own explanation, written for people learning to call a trading API. It is not part of the source cited above and it describes no particular broker.
What should I do about invalid_client?
Check the client id and secret for the environment you are calling, and the way the API expects them to be sent. Keep the secret out of source control and out of any message asking for help.
This page is an independent explanation in plain words. The definition itself is in the source it was read from, which is the authority if the two ever differ.