Not authenticated

Code

NOT_AUTHENTICATED

When it happens

• A protected operation is attempted without an authenticated session.

Typical scenarios:

• Client starts runtime/game flow without a valid auth session
• Token expired or account was removed from local storage
• Server-side verification rejects the session

How to handle

• In UI, prompt login and provide a clear “session expired” message when appropriate.
• In server flows, return 401 and avoid leaking details.

Notes

This code is intentionally flat (no AUTH/... prefix) for now, but it is grouped under AUTH in AppErrorCodes for discoverability.