Skip to content
ShiftGraph

HTTP 401, authentication and identity

AUTH-001

Invalid email or password.

What it means

The address and password did not match an account. The response is identical whether or not the address exists, so it cannot be used to discover who has an account.

What to do

Check both values and try again. Repeated failures slow the endpoint down before they lock it.

The response

Every failure arrives in this shape. The trace_id is worth keeping: it identifies the request in our logs and carries nothing about your data.

{
  "type": "https://shiftgraph.dev/errors/AUTH-001",
  "title": "Invalid email or password.",
  "status": 401,
  "code": "AUTH-001",
  "trace_id": "01J8Z…"
}

Related codes

Sessions, second factors, sign-in methods, and the credentials that reach the API. A second factor is required of every account, so several of these have no bypass by design.

The full error reference, or write to support@shiftgraph.dev with the trace id.