401 NOT_AUTHORIZED

Question

testerman OP

Created Jun ’19

Replies 5

Boosts 0

Views 7.8k

Participants 5

I has api keys, but when i request appstore connect api, it return 401 NOT_AUTHORIZED.

payload = {

'iss': '***-xx',

'exp': int(time.time()),

'aud': 'appstoreconnect-v1'

}

header = {

'alg': 'ES256',

'kid': '***'

}

This is the response.

{

"errors": [

{

"status": "401",

"code": "NOT_AUTHORIZED",

"title": "Authentication credentials are missing or invalid.",

"detail": "Provide a properly configured and signed bearer token, and make sure that it has not expired. Learn more about Generating Tokens for API Requests https://developer.apple.com/go/?id=api-generating-tokens"

}

]

}

Boost

Answer 1

testerman OP

Jun ’19

I found the reason, remove 'alg' from header, and it works.

Maybe the document should be update.

0

Answer 2

jotade OP

Oct ’19

you are my hero!

0

Answer 3

hxyppp OP

Nov ’19

Today,I also meeting this problem,I try your method 。But it`s don`t resolve my problem。Help me ,please!

0

Answer 4

NavjotDeol OP

Nov ’20

I am facing the same problem. Can you please help in figuring out the reason of error? For me after removing alg attribute from header, the problem still persists.

0

Answer 5

quickbacon OP

Jun ’21

What I do to get my JWT:

I am using a Python Library (authlib) to generate my JWT.

import datetime

from authlib.jose import jwt

def main():
    header = {
        'alg': 'ES256',
        'kid': '##########',
        'typ': 'JWT'
    }

    payload = {
        'iss': '################################',
        'aud': 'appstoreconnect-v1'
        'exp': int(datetime.datetime.now().timestamp()) + 1200 # token good for 20 min, as per https://developer.apple.com/go/?id=api-generating-tokens
    }

    key = open('AuthKey_##########.p8', 'r').read()
    token = jwt.encode(cls.header, cls.payload, key).decode('utf-8')

    print(token)

if __name__ == '__main__':
    main()

I then use that token in a form similar to 'Authorization: Bearer $token' in a GET.

1