{ status: 400, message: 'Invalid authorization code' } (OAuth authorization code flow)

API
4

Then you are not storing the access_token in your session in order to reload and use that access_token

Or the user is leaving the site and the cookie is dying in order to reload the session