Skip to main content

Errors & Rate Limits

Error Codes

Status CodeDescription
400Bad Request - Invalid parameters
401Unauthorized - Invalid credentials
403Forbidden - Insufficient permissions
404Not Found - User not found
429Too Many Requests - Rate limit exceeded
500Internal Server Error

Rate Limiting

Authentication endpoints have the following rate limits:

  • Authentication attempts: 5 requests per minute per IP
  • Password reset requests: 3 attempts per hour per email
  • Failed login attempts may trigger temporary account lockouts