What it means
defined, not raised (see below).
How to handle it
Do not branch on this dormant code; current sign-in deliberately returns invalid_credentials for unverified addresses.
Wire contract
| Code | email_not_verified |
|---|---|
| Class | permission |
| HTTP status | 403 |
| Meta keys | console_url |
| Raised | No — reserved for compatibility |
The response uses the standard {"error": {…}} envelope. Branch on error.code, not the human-readable message. Preserve request_id when reporting a failure.