Invalid DPoP proof
The KeenAuth APIs return this problem type with HTTP status 401 (Unauthorized).
Problem type
| Field | Value |
|---|---|
| Type URI | https://docs.keenauth.com/errors/invalid_dpop_proof |
| Code | invalid_dpop_proof |
| HTTP status | 401 Unauthorized |
| Title | Invalid DPoP proof |
Meaning
The DPoP proof is invalid: htm, htu, ath, a replayed jti, iat, or a key that does not match cnf.jkt (RFC 9449 §7.1).
Example response
Example response body. detail is a human-readable English description that is not meant for end users; instance identifies the request.
{
"type": "https://docs.keenauth.com/errors/invalid_dpop_proof",
"title": "Invalid DPoP proof",
"status": 401,
"code": "invalid_dpop_proof",
"detail": "...",
"instance": "urn:idp:request:<request_id>"
}
All error codes: Error reference.