Invalid
Thrown when a grant exchange returns neither a clientSessionToken nor a userJwt.
Exactly one of the two is always set by a healthy backend: the session token means the login is complete, the JWT means a TOTP step is required.