Skip to content

401 unauthorized

Unauthorized. There is no Authorization header, or the key in it is malformed, unknown, revoked or expired. A rotated key answers 401 once its overlap window ends. The response carries WWW-Authenticate: Bearer realm="noresponse-assessments".

What to do

Send Authorization: Bearer nrk_... with a current key. After a rotation, switch every server to the new key before the overlap ends.

Example

{
  "type": "https://docs.noresponse.org/problems/unauthorized",
  "title": "Unauthorized",
  "status": 401,
  "detail": "No API key, or one that is malformed, unknown, revoked or expired.",
  "code": "unauthorized",
  "request_id": "5e8be3a91fde9499f7ce48ae66290895"
}

Every error has this shape. See Errors and limits for the full list.