HTTP 401 Unauthorized

Authentication is required and has failed or has not been provided.

What 401 means

HTTP 401 Unauthorized means the request lacks valid authentication credentials. Despite the name, it's about authentication (who are you?), not authorisation (what can you do?). The server should include a WWW-Authenticate header indicating the required authentication scheme.

Common causes

• Missing authentication token
• Expired JWT or session
• Invalid API key
• Incorrect username/password

How to fix it

• Include valid authentication credentials
• Refresh expired tokens
• Check API key validity
• Implement proper token refresh logic

SEO impact

Content behind authentication is not indexed. Ensure public pages don't require authentication.

Monitoring tip

LemWatch detects when public pages unexpectedly return 401, which could indicate a misconfigured authentication layer.