Invalid DPoP proof

The KeenAuth APIs return this problem type with HTTP status 401 (Unauthorized).

Problem type

Field Value
Type URI https://docs.keenauth.com/errors/invalid_dpop_proof
Code invalid_dpop_proof
HTTP status 401 Unauthorized
Title Invalid DPoP proof

Meaning

The DPoP proof is invalid: htm, htu, ath, a replayed jti, iat, or a key that does not match cnf.jkt (RFC 9449 §7.1).

Example response

Example response body. detail is a human-readable English description that is not meant for end users; instance identifies the request.

{
  "type": "https://docs.keenauth.com/errors/invalid_dpop_proof",
  "title": "Invalid DPoP proof",
  "status": 401,
  "code": "invalid_dpop_proof",
  "detail": "...",
  "instance": "urn:idp:request:<request_id>"
}

All error codes: Error reference.