PRISMATECH SHIELD / Developers

Handle failures safely

HTTP errors are not positive security decisions.

400 / 401 / 403 / 409

Invalid input, missing identity, insufficient scope, or idempotency conflict requires controlled error handling. Never expose credentials.

429 / 503

Rate limits or local Free quotas can return 429. Unavailable security services can return 503. FREE_QUOTA_EXHAUSTED is not an ALLOW decision.

POST /v1/evaluate/login
Authorization: Bearer EXAMPLE_ONLY_NOT_REAL
Idempotency-Key: synthetic-login-0001
Content-Type: application/json

{"userId":"synthetic-user","failedAttempts":0}

Public registration and email verification are not yet approved. Existing customers use the customer portal. No accounts or keys are created here.