There are probably a few ways to handle what should an error message say. Which one makes sense to you? Which detail helps the user fix the problem without reading a stack trace? Developers, please describe the environment and the smallest example that shows the problem. What would you check first, and what result would change your next step? Keep passwords, tokens and other private values out of any code you share. Feel free to explain where your own approach has limits.