# unapproved_software_statement

The software statement presented is not approved for use by this server (RFC 7591 §3.2.2).

## Meaning

Sent by `/register` and `PUT /register/{client_id}` with `400` for any request that
carries a `software_statement`. This server does not verify software statements, and
registering the unsigned body in its place would drop the guarantee the statement was
sent for, so it refuses instead.

## Impact

The client is not registered. Registrant software built for servers that require
software statements cannot register here unchanged.

## Diagnosis

The `client.registration.attempted` record has reason `unapproved_software_statement`,
field `software_statement` and cause `software_statement_unsupported`.

## Mitigation

- As a client developer: omit `software_statement` and send its claims as plain JSON
  members of the registration request.
- As an operator: if the software must be trusted on the strength of a statement,
  register it through the operator or the AdminService after reviewing it.
- As a user: nothing to do.

## Escalation

Support for software statements is a feature request, not an incident.

---

[OAuth error runbooks](https://www.nauthera.io/docs/v1/runbooks/oauth) · Generated from [`internal/runbook/oauth.yaml`](https://github.com/nauthera/nauthera-server/blob/main/internal/runbook/oauth.yaml) in nauthera-server.