Unauthenticated
The server could not tell who is calling.
Why it happens
- The request carries no credentials, or they have expired.
- A capability token was edited, is signed with another secret, or has expired.
What to do
- Sign in again or refresh the token, then repeat the request. A command keeps its idempotency key, so repeating it is safe.
What it looks like
Inside a batch, the operation's frame carries it:
json
{
"id": 1,
"error": {
"code": "unauthenticated",
"message": "Capability has expired"
},
"fin": true
}When the whole request is refused over HTTP, the answer is a problem document:
json
{
"type": "https://eddyboutros.github.io/rayfold/errors/unauthenticated",
"title": "unauthenticated",
"status": 401,
"detail": "Capability has expired",
"code": "unauthenticated"
}See also all error types and the errors chapter of the specification.