LIVE_SERVICE_TOKEN_REQUIRED

Only Live may call this operation

HTTP status 401 Unauthorized, code LIVE_SERVICE_TOKEN_REQUIRED.

What it means#

The operation is on the Live surface (/internal/live/*), which Backstage serves to Live and to nothing else. Live proves it is the caller with its own short-lived service token in the TL-Service-Token header, and the request carried none. A publishable key alone is not enough: it is public by design, and it still decides what the call may see once Live is proven to be the caller.

What to do#

Call Live instead. Storefronts, embeds and buyer-facing clients use the Live API (@ticketlayer/live), which serves the same operations at /sales/* on its own hostname and relays them here. Partner servers use the Backstage API with an organisation API key.

On the wire#

Every error response carrying this code names this page in error.moreInfo, with the request id in the query string. See Error codes for the response shape and the list of every code.