Skip to main content

AST Localization Error Codes (SubSystem 518)

Template Creation (Error Codes 10-19)

SubsystemError CodeHTTP CodeNameComments
51810409TemplateAlreadyExistsA template with the given key already exists

Template Localization (Error Codes 20-29)

SubsystemError CodeHTTP CodeNameComments
51820406LanguageNotSatisfiableNone of the requested language ranges can be satisfied with the available locales

Bad Request Codes (Error Codes 400 and 400x)

SubsystemError CodeHTTP CodeNameDetails
518400400BadRequestAn unspecified Bad Request error. Look for details in the message.
5184001400MissingFieldA required field was missing in the request
5184002400MalformedFieldA field in the request had a wrong format
5184005400MalformedBodyThe request body was malformed and couldn't be parsed

Unauthorized Codes (Error Codes 401 and 401x)

SubsystemError CodeHTTP CodeNameDetails
518401401UnauthorizedThere was a problem authorizing the request, see below for details

Details about 518-401 Unauthorized

This error code includes cases like

  • The header was missing
  • The token could not be decoded
  • The token is from a different realm than the tenant in the request path
  • The token was expired (exp), not yet valid (nbf) or issued in the future (iat)
  • The token's issuer (iss) did not match the expected value discovered from the IdP
    • This is most likely a realm configuration problem in Keycloak, such as not configuring the "Frontend URL" setting in the realm, which is required in a typical setup
      • Failing to configure the Frontend URL will result in a mismatch between the issuer URL that was discovered by the service inside the cluster, and the issuer in the JWT issued for a client outside the cluster
    • After changing the realm configuration, it is necessary to restart the service in order for it to rediscover the realm configuration
  • The token's audience (aud) didn't include all required values specified in the service config (default: none)
  • The token's signature did not match the public key discovered from the IdP

Forbidden / Bad Token Codes (Error Codes 403 and 403x)

SubsystemError CodeHTTP CodeNameDetails
518403403ForbiddenThe user has no permission to access the resource. The details of the failed authorization are printed in the logs

Not Found Codes (Error Codes 404x)

SubsystemError CodeHTTP CodeNameComments
5184041404TemplateNotFoundA template with the given key does not exist

OIDC Errors (Error Codes 100x)

SubsystemError CodeHTTP CodeNameDetails
5181000500GeneralErrorAn unexpected error occurred while authenticating the request. See the log for details.
5181001500IssuerNotConfiguredThe OIDC issuer is not configured. This is probably due to misconfiguration of api.security.openidConnect.baseUrl. See the log for details.
5181002404RealmDoesNotExistThe realm corresponding to the tenant ID in the request does not exist in the IDP. See the log for details.
5181003503IdpUnavailableThe IDP could not be reached for OIDC discovery. This may be a temporary error or due to misconfiguration. See the log for details.
5181004502BadResponseThe IDP response could not be parsed. See the log for details.
5181005502UnexpectedErrorThe IDP returned an unexpected error response during OIDC Discovery. See the log for details.
5181006500IssuerMismatchThe issuer URL returned from OIDC Discovery doesn't match the expected one generated from the configuration. This is probably due to realm misconfiguration in the IDP. See the log for details.
5181007500UnsupportedFlowThe OIDC configuration returned from the IDP specified an unsupported flow. This probably due to realm misconfiguration in the IDP. See the log for details.

General Error Codes (Internal Errors)

SubsystemError CodeHTTP CodeNameDetails
518500500InternalErrorAn unexpected error occurred, check for details in the logs
5185001500DbErrorAn unexpected error occurred during a database operation
5185002500KafkaErrorAn unexpected error occurred during a Kafka operation
518503503ServiceUnavailableThe service's availability was disrupted, look for details in the message.

Configuration Errors (Error Codes 500xx)

SubsystemError CodeHTTP CodeNameDetails
51850010500UnknownTopicRoutingKeyAn outbox item with an unknown topic routing key was encountered
51850020500TrustStoreDoesNotExistThe trust store file does not exist
51050021500TrustStoreRequiredA trust store was required for the configured SSL mode, but none was given