ErrorResponse

Errors are returned with an HTTP 4xx/5xx status code and a body of {"error": "..."}, not the code / msg wrapper.

{
    "error": "source domain is not allowed"
}