unauthorized

HTTP 401. Unauthorized.

When you see it

The Authorization header is missing, malformed, expired, or names a credential this server does not know.

What to do

Check the header is Authorization: Bearer <token>. If the token is an OAuth access token, refresh it. The WWW-Authenticate header on the response points at the authorization server.

The body

type is https://devs.inittasks.com/errors/unauthorized. instance is the path that failed, here /v1/todos. For the full RFC 9457 shape, the request_id field and the retry rules, see errors and retries.