Flutex signs in customer contacts. A valid Perfex staff password does not make that staff account a valid customer login.
Confirm the email and password for the intended contact. Check that both the contact and its customer remain active. Try the customer web portal to help distinguish an account problem from a mobile connection problem.
If needed, use the supported password recovery process and verify the CRM’s mail configuration. Do not send passwords to support or include them in logs.
Verify that the app points to the intended CRM and that the API module is active. MODULE_NOT_ACTIVATED is a licensing issue, not an incorrect password. A server timeout or 503 also does not establish invalid credentials.
Check whether the backend rejects the stored session or refresh token. Refresh tokens rotate and cannot safely be reused. Concurrent custom refresh calls, stale tokens, or a lost successful refresh response may require a new sign-in.
Do not repeatedly replay refresh requests in Postman using a live app session. Use an isolated test session for API diagnostics.
If the issue persists, provide the app/API versions, sanitized error code, whether customer web login works, and the exact action that triggers the failure.