What does this ERROR code means "UNAUTHENTICATED_API_CALL"?

⚙️ API 🙋🏽‍♀️🙋🏽‍♂️ Ask Questions
1

Hello,
I am getting this error code on Create Customer API.
I did not find explanation for this Error Code.

I am not getting what I am doing wrong, Incorrect api Creadetails or account verification or incorrect api url??

3

This error means that one of your headers in the request is wrong.
Could be the access_key, signature, or the salt

2 Likes
4

This error drove me crazy when I was first learning the system. Basically it means that the request was malformed. It can come up in several contexts (maybe more):

  • One or more of the header fields is missing or has an invalid value (as @aviarviv pointed out).
  • There is an error in the calculation of the signature (possibly the body contains whitespace, or the body is represented by {} instead of being blank).
  • The HTTP verb is not correct.

Check the API Reference carefully. Once you get the hang of it, you will hardly ever see this error. I’m sorry the error does not provide more helpful instructions.

1 Like
5

I am getting this same error now, while orking through the access-payments sample, using Node.js for the back-end server.

Error: Network response was not OK. Check logs in the console.
{
    "message": {
        "error_code": "UNAUTHENTICATED_API_CALL",
        "status": "ERROR",
        "message": "access_key header is not valid",
        "response_code": "UNAUTHENTICATED_API_CALL",
        "operation_id": "e51d6e12-25b1-439b-ba84-85d5d3adb67c"
    }
}

I traced the server side code and I do see my access key and secret values when looking at the this object fields, from a breakpoint set in the constructor for the RapydService object:

  constructor() {
    this._accessKey = config.accessKey;
    this._secretKey = config.secretKey;
    this._baseUrl = config.baseRapydApiUrl;

I didn’t see any instructions in the access-sample readme regarding signature calculations or creating a salt, so I assumed the sample code did that for me?

Any help would be appreciated because I am not sure what to try next to fix this.

1 Like
6

Thanks @NotWilliamShatner,

Per our own @Community_Team,

This is a node.js example The utilities.js file implements the signature calculation. You can refer to this at GitHub - RapydPayments/rapyd-request-signatures: When you send a request, you calculate the signature and insert the result into the signature header. When the platform receives the request, it performs the same signature calculation. If the resulting values do not match, the request is rejected.

He also follows this here: https://youtu.be/IUqDc4Siq70?t=455

7

I assume you are doing your development in the sandbox. You have to use the sandbox access key and secret key, and not the production keys. You get both from the Client Portal (when you are logged in as account owner), and you select one or the other with the Sandbox toggle at the lower left of the screen.

2 Likes
10

Hi @Community_Team

I am running crazy here. I keep getting the same error I followed the YouTube video directions on how to request signatures, used the secret and access key I was given but I keep getting this :cold_sweat:

},
"body": {
    "status": {
        "error_code": "UNAUTHENTICATED_API_CALL",
        "status": "ERROR",
        "message": "access_key header is not valid",
        "response_code": "UNAUTHENTICATED_API_CALL",
        "operation_id": "6d96331b-8a24-419c-82c7-d52c9eeb8438"
    }
}

}

11

could it be because I have not activated my account?

12

NO worried. I’ve sorted it out. Madness over, I was using production credentials instead. The toggle button confused me

3 Likes
13

Thanks @Olamihybr,

Just confirming you have your Sandbox access and secret key with the Sandbox request URL.

https://sandboxapi.rapyd.net/v1/data/countries

Are you making your request in Node.js?

If you haven’t made any test request yet, here’s a simple guide of making a request in Postman with your Sandbox credentials.

Here’s a comment with more resources, however these may be address a different error related to when the The API received a request, but the signature did not match.

1 Like
14

A post was split to a new topic: Client Portal Sandbox / Production Switch