---
title: "auth. diagnostics"
description: "Owner: the authz spec (defs/authz.ts). The status is the code's own; the exit comes from its category (CATEGORIES). A warning or info code never sets the status or the exit."
order: 5
---

# `auth.*` diagnostics

Owner: the authz spec (`defs/authz.ts`). The status is the code's own; the exit comes from its category (`CATEGORIES`). A warning or info code never sets the status or the exit.

| Code | Category | Severity | Status | Exit | Retry | Fix | Args |
|---|---|---|---|---|---|---|---|
| <a id="auth.ambiguous_credential"></a>`auth.ambiguous_credential` | input | error | 400 | 2 | no | — | — |
| <a id="auth.step_up_required"></a>`auth.step_up_required` | auth | error | 401 | 4 | no | — | `op`, `maxAgeS` |