HTTPError.net

The fastest way to diagnose, understand, and fix any HTTP status code

401 Unauthorized

Fault: Client
TL;DR

Request requires user authentication credentials.

Authentication is required and has failed or has not been provided.

What This Error Means

Authentication is required and has failed or has not been provided.

Request requires user authentication credentials.

Common Causes

How to Fix It (For Visitors)

How to Fix It (For Developers/Admins)

Code Examples

Here's how to return a 401 status code in various programming languages:

Python (Flask)

from flask import Flask, jsonify

app = Flask(__name__)

@app.route('/endpoint')
def endpoint():
    return jsonify({"message": "Unauthorized"}), 401

Node.js (Express)

const express = require('express');
const app = express();

app.get('/endpoint', (req, res) => {
    res.status(401).json({ message: 'Unauthorized' });
});

PHP

<?php
http_response_code(401);
header('Content-Type: application/json');
echo json_encode(['message' => 'Unauthorized']);
?>

Go

package main

import (
    "encoding/json"
    "net/http"
)

func handler(w http.ResponseWriter, r *http.Request) {
    w.Header().Set("Content-Type", "application/json")
    w.WriteHeader(401)
    json.NewEncoder(w).Encode(map[string]string{
        "message": "Unauthorized",
    })
}

Java (Spring Boot)

@GetMapping("/endpoint")
public ResponseEntity<Map<String, String>> endpoint() {
    Map<String, String> response = new HashMap<>();
    response.put("message", "Unauthorized");
    return ResponseEntity.status(401).body(response);
}

Ruby (Sinatra)

get '/endpoint' do
    status 401
    json message: 'Unauthorized'
end

Browser Compatibility

Browser Support Notes
Chrome✓ Full SupportAll versions
Firefox✓ Full SupportAll versions
Safari✓ Full SupportAll versions
Edge✓ Full SupportAll versions

Official Specification

This status code is defined in RFC 7235 Section 3.1.

View on IANA HTTP Status Code Registry →