Auth Internal Errors

Overview

Auth internal errors are thrown by the authentication infrastructure — encryption contexts, credential vaults, token stores, session management, and provider registration. All are internal errors that should never be exposed to clients. For public-facing auth errors, see Auth Errors.

Encryption Errors

EncryptionContextNotSetError

Thrown when the encryption context is not set before an operation that requires it.

Property	Type	Value
`code`	`string`	`ENCRYPTION_CONTEXT_NOT_SET`
`statusCode`	`number`	`500`
`isPublic`	`boolean`	`false`

new EncryptionContextNotSetError()

EncryptionKeyNotConfiguredError

Thrown when the encryption key is not configured.

Property	Type	Value
`code`	`string`	`ENCRYPTION_KEY_NOT_CONFIGURED`
`statusCode`	`number`	`500`
`isPublic`	`boolean`	`false`

new EncryptionKeyNotConfiguredError()

Vault Errors

VaultLoadError

Thrown when loading a credential vault fails.

Property	Type	Value
`code`	`string`	`VAULT_LOAD_ERROR`
`statusCode`	`number`	`500`
`isPublic`	`boolean`	`false`
`originalError`	`Error \| undefined`	The underlying cause

new VaultLoadError(vaultId: string, originalError?: Error)

Example:

import { VaultLoadError } from '@frontmcp/sdk';

throw new VaultLoadError('user_123', new Error('Redis connection timeout'));
// "Failed to load vault "user_123": Redis connection timeout"

VaultNotFoundError

Thrown when a vault entity is not found.

Property	Type	Value
`code`	`string`	`VAULT_NOT_FOUND`
`statusCode`	`number`	`500`
`isPublic`	`boolean`	`false`

new VaultNotFoundError(entityType: string, id: string)

Example:

import { VaultNotFoundError } from '@frontmcp/sdk';

throw new VaultNotFoundError('credential', 'slack_oauth');
// "credential "slack_oauth" not found in vault"

Token Errors

TokenNotAvailableError

Thrown when a token is not available (e.g., expired or not yet obtained).

Property	Type	Value
`code`	`string`	`TOKEN_NOT_AVAILABLE`
`statusCode`	`number`	`500`
`isPublic`	`boolean`	`false`

new TokenNotAvailableError(message: string)

TokenStoreRequiredError

Thrown when a token store is required but not configured.

Property	Type	Value
`code`	`string`	`TOKEN_STORE_REQUIRED`
`statusCode`	`number`	`500`
`isPublic`	`boolean`	`false`

new TokenStoreRequiredError(context: string)

Example:

import { TokenStoreRequiredError } from '@frontmcp/sdk';

throw new TokenStoreRequiredError('orchestrated auth');
// "Token store is required for orchestrated auth"

TokenLeakDetectedError

Thrown when a potential token leak is detected (e.g., token appearing in logs or responses).

Property	Type	Value
`code`	`string`	`TOKEN_LEAK_DETECTED`
`statusCode`	`number`	`500`
`isPublic`	`boolean`	`false`

new TokenLeakDetectedError(detail: string)

Provider & Registration Errors

NoProviderIdError

Thrown when no provider ID is available during auth flow.

Property	Type	Value
`code`	`string`	`NO_PROVIDER_ID`
`statusCode`	`number`	`500`
`isPublic`	`boolean`	`false`

new NoProviderIdError(message: string)

CredentialProviderAlreadyRegisteredError

Thrown when attempting to register a credential provider that is already registered.

Property	Type	Value
`code`	`string`	`CREDENTIAL_PROVIDER_ALREADY_REGISTERED`
`statusCode`	`number`	`500`
`isPublic`	`boolean`	`false`

new CredentialProviderAlreadyRegisteredError(name: string)

AuthProvidersNotConfiguredError

Thrown when auth providers are not configured.

Property	Type	Value
`code`	`string`	`AUTH_PROVIDERS_NOT_CONFIGURED`
`statusCode`	`number`	`500`
`isPublic`	`boolean`	`false`

new AuthProvidersNotConfiguredError()

OrchestratedAuthNotAvailableError

Thrown when orchestrated auth is not available in the current context.

Property	Type	Value
`code`	`string`	`ORCHESTRATED_AUTH_NOT_AVAILABLE`
`statusCode`	`number`	`500`
`isPublic`	`boolean`	`false`

new OrchestratedAuthNotAvailableError()

Session Errors

SessionSecretRequiredError

Thrown when a session secret is required but not configured.

Property	Type	Value
`code`	`string`	`SESSION_SECRET_REQUIRED`
`statusCode`	`number`	`500`
`isPublic`	`boolean`	`false`

new SessionSecretRequiredError(component: string)

Example:

import { SessionSecretRequiredError } from '@frontmcp/sdk';

throw new SessionSecretRequiredError('session encryption');
// "Session secret is required for session encryption"

SessionIdEmptyError

Thrown when a session ID is empty.

Property	Type	Value
`code`	`string`	`SESSION_ID_EMPTY`
`statusCode`	`number`	`500`
`isPublic`	`boolean`	`false`

new SessionIdEmptyError(storeName: string)

ElicitationSecretRequiredError

Thrown when the elicitation secret is required but not configured.

Property	Type	Value
`code`	`string`	`ELICITATION_SECRET_REQUIRED`
`statusCode`	`number`	`500`
`isPublic`	`boolean`	`false`

new ElicitationSecretRequiredError()

Scope & Access Errors

ScopeDeniedError

Thrown when scope access is denied for a provider.

Property	Type	Value
`code`	`string`	`SCOPE_DENIED`
`statusCode`	`number`	`500`
`isPublic`	`boolean`	`false`

new ScopeDeniedError(providerId: string)

InMemoryStoreRequiredError

Thrown when an in-memory store is required but not available.

Property	Type	Value
`code`	`string`	`INMEMORY_STORE_REQUIRED`
`statusCode`	`number`	`500`
`isPublic`	`boolean`	`false`

new InMemoryStoreRequiredError(component: string)

OrchestratorJwksNotAvailableError

Thrown when the orchestrator JWKS endpoint is not available.

Property	Type	Value
`code`	`string`	`ORCHESTRATOR_JWKS_NOT_AVAILABLE`
`statusCode`	`number`	`500`
`isPublic`	`boolean`	`false`

new OrchestratorJwksNotAvailableError()

AuthInvalidInputError

Thrown when an auth API receives malformed input (e.g., invalid JWK, malformed scope string).

Property	Type	Value
`code`	`string`	`AUTH_INVALID_INPUT`
`statusCode`	`number`	`500`
`isPublic`	`boolean`	`false`

new AuthInvalidInputError(message: string)

CredentialStorageError

Thrown when a credential storage operation fails (vault read/write, key persistence).

Property	Type	Value
`code`	`string`	`CREDENTIAL_STORAGE_ERROR`
`statusCode`	`number`	`500`
`isPublic`	`boolean`	`false`

new CredentialStorageError(message: string)

AuthFlowError

Thrown when a federated auth flow encounters an error (state mismatch, callback failure, etc.).

Property	Type	Value
`code`	`string`	`AUTH_FLOW_ERROR` (or override via constructor)
`statusCode`	`number`	`500`
`isPublic`	`boolean`	`false`

new AuthFlowError(message: string, code?: string)

​Overview

​Encryption Errors

​EncryptionContextNotSetError

​EncryptionKeyNotConfiguredError

​Vault Errors

​VaultLoadError

​VaultNotFoundError

​Token Errors

​TokenNotAvailableError

​TokenStoreRequiredError

​TokenLeakDetectedError

​Provider & Registration Errors

​NoProviderIdError

​CredentialProviderAlreadyRegisteredError

​AuthProvidersNotConfiguredError

​OrchestratedAuthNotAvailableError

​Session Errors

​SessionSecretRequiredError

​SessionIdEmptyError

​ElicitationSecretRequiredError

​Scope & Access Errors

​ScopeDeniedError

​InMemoryStoreRequiredError

​OrchestratorJwksNotAvailableError

​AuthInvalidInputError

​CredentialStorageError

​AuthFlowError

Overview

Encryption Errors

EncryptionContextNotSetError

EncryptionKeyNotConfiguredError

Vault Errors

VaultLoadError

VaultNotFoundError

Token Errors

TokenNotAvailableError

TokenStoreRequiredError

TokenLeakDetectedError

Provider & Registration Errors

NoProviderIdError

CredentialProviderAlreadyRegisteredError

AuthProvidersNotConfiguredError

OrchestratedAuthNotAvailableError

Session Errors

SessionSecretRequiredError

SessionIdEmptyError

ElicitationSecretRequiredError

Scope & Access Errors

ScopeDeniedError

InMemoryStoreRequiredError

OrchestratorJwksNotAvailableError

AuthInvalidInputError

CredentialStorageError

AuthFlowError