# client_not_allowed

> The client_not_allowed Problem Details code: The page’s origin (or the app’s bundle id or package name) is not on the publishable key’s list.

Source: https://docs.nexafone.so/v1/errors/client_not_allowed/

| | |
| --- | --- |
| HTTP status | `403` |
| Area | Keys and SDK sessions |
| Problem `type` | `https://docs.nexafone.so/errors/client_not_allowed` |

The page’s origin (or the app’s bundle id or package name) is not on the publishable key’s list. Add it to the key, or for a partner key to the partner’s domains.

## What the `detail` says

The `detail` explains the occurrence; it can read, for example:

- Partner sessions are exchanged only on the partner's own sites.
- This publishable key does not allow this client.

## Handling it

The request is understood but refused; retrying it unchanged fails again.

## Example

```json
{
  "type": "https://docs.nexafone.so/errors/client_not_allowed",
  "title": "Forbidden",
  "status": 403,
  "code": "client_not_allowed",
  "detail": "Partner sessions are exchanged only on the partner's own sites.",
  "requestId": "01J9Z8Q4TQ3W6M5V2X7Y8Z9A0B"
}
```

Match on `code`, never on `detail`: the wording may change. See [Problem Details](/v1/errors/).