LIVE_SERVICE_TOKEN_INVALID

The Live service token was refused

HTTP status 401 Unauthorized, code LIVE_SERVICE_TOKEN_INVALID.

What it means#

The request carried a TL-Service-Token, but it did not verify: it was not issued by Live (ticketlayer-live), its signature does not match a key Live publishes, it was minted for another audience, or it has expired or is older than two minutes.

What to do#

Nothing outside Live should send this header. From Live, check that the signing key (LIVE_SERVICE_PRIVATE_KEY) is the one whose public half Live serves at /.well-known/jwks.json, that LIVE_JWKS_URL on this API points at it, and that the Worker clock is not far out.

On the wire#

Every error response carrying this code names this page in error.moreInfo, with the request id in the query string. See Error codes for the response shape and the list of every code.