OAuth Errors

Guide to troubleshooting OAuth errors

OAuth errors are specific to OAuth based flows. To learn more about OAuth, see the OAuth guide.

INCORRECT_OAUTH_NONCE

An incorrect OAuth nonce was supplied when re-initializing Link.

Server-Side

Common causes

During the OAuth flow, Link must be initialized, the user must be handed off to the institution's OAuth authorization page, and then Link must be re-initialized for the user to complete Link flow. This error can occur if a different nonce is supplied during the re-initialization process than was originally supplied to Link for the first initialization step.

Troubleshooting steps

When re-initializing Link, make sure to use the same nonce that was used to originally initialize Link for that Item.

API error response
1
2
3
4
5
6
7
8
http code 400 
{
 "error_type": "OAUTH_ERROR",
 "error_code": "INCORRECT_OAUTH_NONCE",
 "error_message": "nonce does not match",
 "display_message": null,
 "request_id": "HNTDNrA8F1shFEW"
}

INCORRECT_LINK_TOKEN

An incorrect Link token was supplied when re-initializing Link.

Server-Side

Common causes

During the OAuth flow, Link must be initialized, the user must be handed off to the institution's OAuth authorization page, and then Link must be re-initialized for the user to complete Link flow. This error can occur if a different link_token is supplied during the re-initialization process than was originally supplied to Link for the first initialization step.

Troubleshooting steps

When re-initializing Link, make sure to use the same link_token that was used to originally initialize Link for that Item.

API error response
1
2
3
4
5
6
7
8
http code 400 
{
 "error_type": "OAUTH_ERROR",
 "error_code": "INCORRECT_LINK_TOKEN",
 "error_message": "link token does not match original link token",
 "display_message": null,
 "request_id": "HNTDNrA8F1shFEW"
}

OAUTH_STATE_ID_ALREADY_PROCESSED

The OAuth state has already been processed.

Server-SideorClient-Side

Common causes

During the OAuth flow, Link must be initialized, the user must be handed off to the institution's OAuth authorization page, and then Link must be re-initialized for the user to complete Link flow. This error can occur if the OAuth state ID used during re-initialization of Link has already been used.

Troubleshooting steps

When re-initializing Link, make sure to use a unique OAuth state ID for each Link instance.

When re-initializing Link, make sure to correctly set the receivedRedirectUri as described in the client-side configuration section of the OAuth Guide. Plaid will automatically extract the OAuth state ID from the receivedRedirectUri.

API error response
1
2
3
4
5
6
7
8
http code 208 
{
 "error_type": "OAUTH_ERROR",
 "error_code": "OAUTH_STATE_ID_ALREADY_PROCESSED",
 "error_message": null,
 "display_message": null,
 "request_id": "HNTDNrA8F1shFEW"
}