# Invalid DPoP proof

The KeenAuth APIs return this problem type with HTTP status 401 (Unauthorized).

## Problem type

| Field | Value |
|---|---|
| Type URI | `https://docs.keenauth.com/errors/invalid_dpop_proof` |
| Code | `invalid_dpop_proof` |
| HTTP status | 401 Unauthorized |
| Title | Invalid DPoP proof |

## Meaning

The DPoP proof is invalid: htm, htu, ath, a replayed jti, iat, or a key that does not match `cnf.jkt` (RFC 9449 §7.1).

## Example response

Example response body. `detail` is a human-readable English description that is not meant for end users; `instance` identifies the request.

```json
{
  "type": "https://docs.keenauth.com/errors/invalid_dpop_proof",
  "title": "Invalid DPoP proof",
  "status": 401,
  "code": "invalid_dpop_proof",
  "detail": "...",
  "instance": "urn:idp:request:<request_id>"
}
```

All error codes: [Error reference](/docs/errors).