40108 — auth_refused

Catch-all auth refusal, set when a more specific identifier is not available. Terminal.

At a glance — HTTP 401 · close 1008 (unmapped reason) · terminal · SDK FluxyAuthError (check refusalCode).

What to do

• Check the JWT tid (project), sub (user), and that the user is a member of the room.
• The raw close reason often names the real refusal (not_member, token_expired, …) — branch on that first; auth_refused is the fallback.
• describeConnectionError() resolves the catalog entry the SDK matched, and falls back to this one when nothing parsed.

Related

• 40100 token_expired
• 40101 invalid_token
• 40300 not_member
• 10008 ws_policy