insufficient_scope - The request requires higher privileges than
provided by the access token.
The resource server SHOULD respond with the HTTP 403 (Forbidden)
status code and MAY include the 'scope' attribute with the scope
necessary to access the protected resource.
invalid_client - Client authentication failed (e.g., unknown client,
no client authentication included, or unsupported authentication method).
The authorization server MAY return a HTTP 401 (Unauthorized) status code
to indicate which HTTP authentication schemes are supported.
If the client attempted to authenticate via the "Authorization" request header field,
the authorization server MUST respond with a HTTP 401 (Unauthorized) status code and
include the "WWW-Authenticate" response header field matching the authentication scheme used by the client.
invalid_grant - The provided authorization grant
(e.g., authorization code, resource owner credentials) or refresh token is invalid, expired, revoked,
does not match the redirection URI used in the authorization request, or was issued to another client.
invalid_request - The request is missing a required parameter,
includes an invalid parameter value,
includes a parameter more than once, or is otherwise malformed.
invalid_scope - The requested scope is invalid, unknown, malformed or
exceeds the scope granted by the resource owner.
invalid_token - The access token provided is expired, revoked,
malformed, or invalid for other reasons.
The resource SHOULD respond with the HTTP 401 (Unauthorized) status code.
The client MAY request a new access token and retry the protected resource request.
server_error - The authorization server encountered an
unexpected condition that prevented it from fulfilling the request.
(This error code is needed because a 500 Internal Server Error HTTP status code
cannot be returned to the client via a HTTP redirect.)
temporarily_unavailable - The authorization server is currently unable
to handle the request due to a temporary overloading or maintenance of the server.
(This error code is needed because a 503 Service Unavailable HTTP status code
cannot be returned to the client via an HTTP redirect.)
unauthorized_client - The client is not authorized to request
an authorization code or access token using this method.
unsupported_grant_type - The authorization grant type is not supported by the authorization server.
unsupported_response_type - The authorization server does not support
obtaining an authorization code or access token using this method.
access_denied- The resource owner or authorization server denied the request.