unauthenticated

What it means

A credential was presented and could not be verified: the key is unknown, revoked, malformed or not valid for Ironfang Finance. Anonymous access, where an operation allows it, sends no credential at all, so a bad key never falls back to anonymous.

What to do

Send a valid platform API key as a bearer token, or no Authorization header at all for the anonymous operations.

What the response carries

type

https://ironfang.uk/problems/unauthenticated, this page.

status

Always 401 for this code.

code

unauthenticated. Stable: branch on this, not on the wording of title or detail.

detail

What happened this time, safe to show to a person. It never carries invoice content.

request_id

The same value as the X-Ironfang-Request-ID header. Quote it to support.

retry_after_seconds

Never present for this code.

outcome

Absent. This code is not a statement about any document.

Problems follow RFC 9457 and are served as application/problem+json. A validation finding is never a Problem: an invalid invoice is a successful response that lists its findings. See every problem type, the Finance guide and the OpenAPI contract.