Skip to main content

[401] Not authorized

Access to the given resource has been denied, because:

Missing api-key, api-secret​

  • api-key / api-secret are not provided
curl --request GET \
  --url ... \
  --header 'Api-Key: <api-key>' \
  --header 'Api-Secret: <api-secret>' \
  --header 'Content-Type: application/json'

Access not allowed​

  • api-key / api-secret is not valid, access token can't be created
note

To obtain an access token, which will later be used in the Authorization header, you need to make a request to the authentication endpoint using your api-key and api-secret.
Once you have the token, all subsequent requests to other endpoints should include it in the Authorization: Bearer <token> header.

Authorization header must be provided​

  • No access token has been provided in authorization header.
  --header: 'Authorization: Bearer <token>'

Invalid key/secret​

  • API key/secret either expired or is disabled

Access token expired​

  • access token has expired or is not valid

Refresh access token and retry.

Email or phone number required​

  • Either email or phone number must be provided for authentication
note

This error typically occurs when attempting to authenticate without providing valid contact information. Provide either a valid email address or phone number in your request.

Invalid PIN​

  • The provided PIN is incorrect or has expired
note

TODO: Add specific details about PIN validation requirements and retry limits.