Unauthorized

← Back to Overview

This error occurs when the request is missing authentication credentials, contains expired tokens, or provides invalid tokens.

---

Error Response Example (RFC 9457)

{
  "type": "https://docs.apinow.app/errors/unauthorized",
  "title": "Authentication Failed",
  "status": 401,
  "code": "AUTHENTICATION_FAILED",
  "detail": "Missing or invalid authorization credentials.",
  "instance": "/api/v1/posts"
}

---

Troubleshooting Guide

For API Consumers (What it means & how to fix)

• Missing Token: Make sure you include the HTTP header Authorization: Bearer <your_jwt_token> in your request.
• Expired Token: Your session token has expired. Request a new login token via the /login or /auth endpoint.
• Malformed Token: Ensure the token is copied correctly without extra spaces or truncated characters.

For API Authors (Domain & API Modeler notes)

• Authentication Strategy: Verify in the API Modeler under “Security Settings” if the API requires authentication. If the API is intended to be completely public, check the “Allow Public Access” rules on exposed entities.