AUTH_OAUTH_STATE_MISMATCH
HTTP 400No
CSRF state did not match.
By default a failed call returns a result with an error instead of throwing, so your business flow is never interrupted.
Published error codes are permanent: their meaning never silently changes, and deprecated codes keep returning for at least 12 months.