401
identity.step_up_requiredidentityThis action needs recent re-authentication
Returned by the implementation; no specification rule declares it yet.
The session authenticated, but not recently enough for this action. The response carries a step_up extension naming the acceptable methods, the maximum age and whether the existing evidence was missing, expired or invalid.
Why the API refuses
recent re-authentication required
What to do
Re-authenticate with one of the offered methods and retry with the resulting step-up token. If you use @paygate/api-client, isStepUpRequired(err) narrows it and a configured StepUpHandler does the retry for you. API keys cannot step up — an operation that requires it is a session operation.