invalid_grant

The provided authorization code or refresh token is invalid.

Explanation

The client attempted to use a code or refresh_token with the /token which the server rejected.

Remediation

The code or refresh_token should be discarded.

This error occurs when:

• a token or session has become invalid or was revoked
• PKCE verification fails
• a request is made that needs stronger authentication
• a subscription is made inactive