When "invalid-action", "invalid-audience", and "invalid-scope" Messages Are Displayed in Consent Screen
Last Updated:
Overview
The consent screen has some error messages that are rarely presented to end users. This article explains the circumstances under which these specific messages are displayed to assist with localization or testing efforts.
The relevant error messages include:
-
invalid-action: Invalid action
-
invalid-audience: Audience is required
-
invalid-scope: Invalid scope, must be an array
Applies To
- Universal Login
Cause
These messages are displayed when a malformed POST request is sent to Universal Login's consent screen endpoint, /u/consent.
An end user would normally be unable to trigger these messages intentionally unless the page leverages ACUL and has a path where the POST request can be malformed.
Solution
As these messages are intended to handle edge-case errors, leaving the default values would be reasonable.
