Skip to content

The v1 docs follow nauthera-server's main branch and its 0.x releases on the way to 1.0, so fields and APIs can still change.

v1

unapproved_software_statement

Docs version v1 (main)Nauthera is pre-1.0, in a design-partner program

The software statement presented is not approved for use by this server (RFC 7591 §3.2.2).

Meaning

Sent by /register and PUT /register/{client_id} with 400 for any request that carries a software_statement. This server does not verify software statements, and registering the unsigned body in its place would drop the guarantee the statement was sent for, so it refuses instead.

Impact

The client is not registered. Registrant software built for servers that require software statements cannot register here unchanged.

Diagnosis

The client.registration.attempted record has reason unapproved_software_statement, field software_statement and cause software_statement_unsupported.

Mitigation

  • As a client developer: omit software_statement and send its claims as plain JSON members of the registration request.
  • As an operator: if the software must be trusted on the strength of a statement, register it through the operator or the AdminService after reviewing it.
  • As a user: nothing to do.

Escalation

Support for software statements is a feature request, not an incident.

OAuth error runbooks · Generated from internal/runbook/oauth.yaml in nauthera-server.