GMAIL_OAUTH_STATE_INVALID

Cause

The signed `state` failed its HMAC check, was past its expiry window, or carried no user claim. An unverified state never yields claims, so a forged user_id cannot drive account attachment.

How to fix it

Restart the Gmail connect flow from the beginning.

Example response

{
  "error_code": "GMAIL_OAUTH_STATE_INVALID",
  "error_type": "auth",
  "error_message": "The Gmail OAuth state did not verify.",
  "hint": "Restart the Gmail connect flow from the beginning.",
  "docs_url": "https://docs.billerapi.com/errors/GMAIL_OAUTH_STATE_INVALID",
  "request_id": "d94f5e2a-8c3b-4f1e-9a7d-6b2c1e0f8a34"
}

Related

• Error handling — the error envelope shape and how to parse it
• Error code reference — every stable error code