Common Authentication Errors

401 Unauthorized

Cause: Invalid or missing signature

Solutions:

• Verify HMAC calculation is correct
• Ensure you're using the correct hmacSecret
• Verify the string to sign is correct
• Check the order of elements in stringToSign

// ✅ Correct
const stringToSign = `${method}${path}${queryString}${timestamp}${body}`;

// ❌ Wrong - incorrect order
const stringToSign = `${path}${method}${timestamp}${body}`;

403 Forbidden

Cause: Timestamp is too old

Solutions:

• Use a recent timestamp
• Ensure server clock is synchronized
• Don't use cached timestamps

400 Bad Request

Cause: Missing or invalid headers

Solutions:

• Ensure all required headers are present
• Verify header values
• Check header format is correct

Related