ErrLookup › ory/hydra

ory/hydra

Internet-scale OpenID Certified™ OpenID Connect and OAuth2.1 provider that integrates with your user management through headless APIs. Solve OIDC/OAuth2 user cases over night. Consume as a service on Ory Network or self-host. Trusted by OpenAI and many others for scale and security. Written in Go. · Go · 664 source files

Analyzed at 4174065ffb on 2026-09-03. 245 documented errors.

Code / Message	Type	Severity	Tags
failed to run all SQL migrations: direction=	exception	error	database, migration, timeout, transaction
jwks: unable to generate key	exception	critical	jwks, go, crypto, entropy, ecdsa
expected X-Forwarded-Proto header to be https but got	http	error	http, tls, proxy, oryx
neither remote address nor any x-forwarded-for values match…	exception	error	network, cidr, proxy, oryx
err.Error()	http	warning	http, json, cli, oryx
`server_error` {"error":"server_error","error_description":"%s"}	http	error	oauth2, fosite, json
multiple types %+v are not supported for path	exception	error	json-schema, types, codegen
unable to execute statement	exception	error	database, migration, sql, ddl
failed to encode private key	exception	error	tls, x509, crypto, parsing
invalid elliptic curve key size, this algorithm does not…	validation	error	go, jose, crypto, ecdsa, key-generation
`ErrKeyCanNotBeTypeAsserted` key could not be type asserted	validation	error	go, type-assertion, mapx, jwt-claims
failed to run jsonnet within 1s: filename=	exception	error	timeout, jsonnet, context-deadline
Expected request to be of type *Session, but got: %T	exception	error	go, type-mismatch, oauth2, device-flow
problem with migration	exception	error	database, migration, sql, permissions
Failed to encode request body	http	error	http, json, handler
Hardware Security Module is not supported on this platform.	exception	critical	hsm, pkcs11, build-config, hydra
`ErrUnsupportedKeyAlgorithm` %s	exception	error	jwk, crypto, unsupported-algorithm
the CA certificate does not have the client authentication…	validation	error	tls, x509, mtls, certificate-config
file loader disabled	validation	error	go, osx, file-io, security, configuration
`invalid_request` existing user code signature	error_code	error	database, unique-constraint, oauth2, device-flow
invalid flow state: expected one of	error_code	error	oauth2, oidc, flow-state, state-machine
jsonnetsecure: " + result	exception	error	jsonnet, evaluation, sandbox
problem inserting migration version	exception	critical	database, migration, data-consistency, go
unknown migration direction	validation	error	migrations, file-naming, database
cannot marshal page token	exception	error	json, serialization, pagination
unsupported key algorithm	error_code	error	jose, jwk, crypto, validation
DSN scheme yugabyte:// declares a YugabyteDB database but…	validation	error	database, yugabytedb, dialect, misconfiguration
immutable configuration key	exception	critical	configuration, hot-reload, immutable, secrets
%s	exception	error	migrations, database, dialect, file-naming
Found a migration file that does not match the file…	validation	error	migrations, file-naming, database
DSN scheme postgres:// declares a PostgreSQL database but…	validation	error	database, dsn, cockroachdb, postgresql, config
problem inserting migration version	exception	error	database, migration, go
DSN scheme postgres:// declares a PostgreSQL database but…	validation	error	database, dsn, yugabytedb, postgresql, config
failed to create certificate	exception	error	tls, x509, crypto, invalid-key
remote JSON pointers are not supported	exception	error	json-pointer, validation, formatting
priv/pub JWK key mismatch	validation	error	jwk, crypto, key-mismatch, configuration
problem deleting migration version	exception	critical	database, migration, data-consistency, go
error processing	exception	error	migrations, database, sql, execution
unable to find any migrations for dialect	exception	error	database, migration, configuration, embed
cookiex: cookie could not be decoded	validation	error	cookies, go, session, encoding
`ErrNoProcessPool` jsonnetsecure: a process pool is required; use MakeInProcessVM to evaluate in…	exception	error	jsonnet, process-isolation, nil-argument, api-misuse
jsonnetsecure: acquire	exception	error	go, pool, concurrency, context-canceled, jsonnet
When using flag -e, environment variable DSN must be…	console	error	cli, configuration, janitor, dsn, env
jwt from authorization HTTP header is missing value for…	http	error	jwt, middleware, http-header
a key ID must be specified when multiple JWK sets are…	exception	error	jwks, go, configuration, validation
detected circular dependency in schema path	exception	error	json-schema, recursion, circular-reference
migrations have not yet been fully applied: %+v	error_code	error	database, migrations, startup, schema
migrator: problem creating schema migrations	exception	error	database, migration, schema
Only access tokens are allowed in the authorization header.	http	error	oauth2, oidc, userinfo, access-token
failed to write json output	exception	error	go, io, broken-pipe, subprocess, stdout
DNS lookup timed out	exception	error	dns, network, timeout, ssrf
Token used before issued	validation	error	jwt, oauth2, clock-skew, validation
flow ForceSubjectIdentifier	error_code	error	oauth2, oidc, hydra, login-flow, force-subject-identifier
invalid JWK key	validation	error	go, jose, jwk, key-parsing, validation
`ErrInvalidHash` the encoded hash is not in the correct format	validation	error	passwords, hashing, crypto, format
newWorker: warm up failed	exception	critical	go, subprocess, sandbox, landlock, timeout
invalid autocommit flag	validation	error	migrations, file-naming, autocommit, database
unsupported operation	exception	error	json-patch, rfc6902, validation
`ErrUnableToFindKeyID` specified JWK kid can not be found in the JWK sets	exception	error	jwks, jwt, key-lookup
unable to scan type %T as JSON into %T	error_code	error	json, database, scan, type-mismatch
Malformed response from the accept endpoint	http	error	json, hydra, api-contract
cannot scan %T into JSONRawMessage	validation	error	json, database-scan, type-mismatch, sql-driver
plan must define a DefaultPageToken	validation	error	go, pagination, configuration
key validation is failing	exception	error	network, ssrf, dns, validation
errors.New(err)	exception	warning	jsonnet, snippet-evaluation, stderr, user-input
`ErrBcryptPasswordLengthReached` passwords are limited to a maximum length of 72 characters	validation	error	bcrypt, password, validation, hashing
jsonnetsecure: eval	exception	error	jsonnet, worker-process, wrapped-error
error parsing patch operations	exception	error	json-patch, rfc6902, malformed-request
http(s) loader disabled	validation	error	go, osx, http, security, configuration
failed to encode JSON Web Key Set	console	error	jwk, json, serialization, sdk
Failed to accept user code request	http	error	network, http, hydra
jwksx: " " does not support arbitrary key length	exception	error	jwks, go, crypto, validation
`ErrKeyDoesNotExist` key is not present in map	validation	warning	maps, type-assertion, sentinel-error
invalid elliptic curve key size, use one of 256, 384, or 521	validation	error	go, jose, crypto, ecdh, jwe, key-generation
expected JSON value to be an array but got type	validation	error	database, json, scan, type-mismatch
expected status code 200 but got	exception	error	http, jwks, network
failed to generate serial number	exception	error	crypto, tls, random-generation, environment
unable to base64 decode the location	exception	error
value is out of range	validation	error	go, range-overflow, time, mapx
cannot create XChaCha20-Poly1305 AEAD	exception	error	crypto, aead, chacha20, initialization
`ErrProcessPoolClosed` jsonnetsecure: process pool closed	exception	error	jsonnet, process-pool, lifecycle, use-after-close
DSN scheme cockroach:// declares a CockroachDB database but…	validation	error	database, cockroachdb, dialect, misconfiguration
Session must be of type JWTSessionContainer but got type: %T	error_code	error	oauth2, fosite, jwt, type-assertion, session
error executing , sql	exception	critical	migrations, database, sql, execution
invalid SQL identifier	validation	error	sql, validation, security, injection
file watch	error_code	warning	tls, file-watcher, filesystem, inotify
flow Subject does not match the HandledLoginRequest Subject	error_code	error	oauth2, oidc, hydra, login-flow, subject-mismatch
can not serve request over insecure http	http	error	go, http, tls, middleware, proxy
cookiex: payload must be a flat JSON object with string…	validation	error	cookies, json, legacy, type-mismatch
cookiex: purpose must be non-empty and must not contain a…	validation	error	cookies, go, validation, configuration
cookiex: cannot derive key	exception	error
could not parse the endpoint URL	exception	error	cli, url, configuration, parsing
unable to decode JSON payload into %T	error_code	error	json, unmarshal, database, decoding
new request	exception	error
{"error": "%s"}	http	error
cookiex: cannot bridge legacy cookie	exception	error
could not query database version to verify dialect	exception	error	database, postgres, dialect, query
key must be exactly 32 long bytes, got	error_code	error	crypto, aead, aes-gcm, key-length
no tls configuration was found	error_code	error	go, tls, configuration, certificates
failed to generate private key	exception	error	crypto, tls, rsa, environment