FAN_TURN_FOREIGN_CREDENTIAL

The fan surface takes one credential

HTTP status 401 Unauthorized, code FAN_TURN_FOREIGN_CREDENTIAL.

What it means#

The request carried a TL-Fan-Turn and another credential as well: an Authorization header (a staff token, an API key, an embed session, a channel key), X-Channel-Key, X-Customer-Token, X-Order-Access-Token, TL-Service-Token or DPoP. The fan surface refuses a request that carries any of them, so nothing can ride along with a turn credential.

What to do#

Send the turn credential alone. The customer token and order access tokens a turn needs travel inside it, in its ctk and oat claims.

On the wire#

Every error response carrying this code names this page in error.moreInfo, with the request id in the query string. See Error codes for the response shape and the list of every code.