> ## Documentation Index
> Fetch the complete documentation index at: https://docs.noresponse.org/llms.txt
> Use this file to discover all available pages before exploring further.

# 401 invalid_hook_signature

> Your auth provider called the hosted endpoint of an integration, and NoResponse refused the call.

HTTP 401Not retryable

## Why

* WorkOS did not sign the call with the current secret of that integration.
* Auth0 did not authenticate the call with the current secret of that integration.
* The WorkOS signature is more than 5 minutes old.

Your auth provider then applies its own failure setting.

## What to do

Check that your auth provider has the current secret of the integration. After a rotation, the old secret works for 24 hours.

## In the SDKs

The Node and Python SDKs raise `AuthenticationError`. The Go SDK returns `*apierrors.AuthenticationError`, which you match with `errors.As`.

```json title="401 invalid_hook_signature" theme={"theme":{"light":"github-dark-default","dark":"github-dark-default"}}
{
  "type": "https://docs.noresponse.org/problems/invalid-hook-signature",
  "title": "Invalid hook signature",
  "status": 401,
  "detail": "The request is not signed or authenticated with this integration's secret.",
  "code": "invalid_hook_signature",
  "request_id": "5e8be3a91fde9499f7ce48ae66290895"
}
```

Every error has this shape. [Errors and limits](https://docs.noresponse.org/reference/errors.md) lists every code.


This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.