Client secret rejected
What it means
The secret is wrong for this client_id: rotated or expired, from another environment, or for a different app.
Fix
Regenerate or re-copy the secret for this exact client_id and environment from the vendor portal.
Seen on real servers
{
"error": "invalid_client",
"error_description": "Invalid client_secret in the basic auth header"
}Check it with smart-doctor
Run your login and smart-doctor ranks this cause against the others, with the evidence it found.
npx smart-doctor check my-profileAlready have the server’s error? Explain it without running anything.
npx smart-doctor explain '{"error":"invalid_client","error_description":"Invalid client_secret in the basic auth header"}'