401 {"message":"Unauthorized"}

확인 범위

이 문서는 화면 또는 로그에 표시된 401 {"message":"Unauthorized"} 문구가 Amazon Web Services 공식 원문의 항목과 일치하는지 확인합니다.

원문 발췌

Troubleshooting issues with HTTP API JWT authorizers - Amazon API Gateway View a markdown version of this page Troubleshooting issues with HTTP API JWT authorizers - Amazon API Gateway DocumentationAmazon API GatewayDeveloper Guide Issue: My API returns 401 {"message":"Unauthorized"} Troubleshooting issues with HTTP API JWT authorizers The following provides troubleshooting advice for errors and issues that you might encounter when using JSON Web Token (JWT) authorizers with HTTP APIs. Issue: My API returns 401 {"message":"Unauthorized"} Check the www-authenticate header in the response from the API. The following command uses curl to send a request to an API with a JWT authorizer that uses $request.header.Authorization as its identity source. $curl -v -H "Authorization: token" https://api-id.execute-api.us-west-2.amazonaws.com/route (새 창에서 열림) The response from the API includes a www-authenticate header. ... < HTTP/1.1 401 Unauthorized < Date: Wed, 13 May 2020 04:07:30 GMT < Content-Length: 26 < Connection: keep-alive < www-authenticate: Bearer scope="" error="invalid_token" error_description="the token does not have a valid audience" < apigw-requestid: Mc7UVioPPHcEKPA= < * Connection #0 to host api-id.execute-api.us-west-2.amazonaws.com left intact {"message":"Unauthorized"}} In this case, the www-authenticate header shows that the token wasn't issued for a valid audience. For API Gateway to authorize a request, the JWT's aud or client_id claim must match one of the audience entries that's configured for the authorizer. API Gateway validates client_id only if aud is not present. When both aud and client_id are present, API Gateway evaluates aud. You can also decode a JWT and verify that it matches the issuer, audience, and scopes that your API requires. The website jwt.io can debug JWTs in the browser. The OpenID Foundation maintains a list of libraries for working with JWTs. To learn more about JWT authorizers, see Control access to HTTP APIs with JWT authorizers in API Gateway. Document Conventions Lambda integrations API Gateway WebSocket APIs Did this page help you? - Yes Thanks for letting us know we're doing a good job! If you've got a moment, please tell us what we did right so we can do more of it. Did this page help you? - No Thanks for letting us know this page needs work. We're sorry we let you down. If you've got a moment, please tell us how we can make the documentation better.

확인 절차

1. 현재 화면 또는 로그에서 401 {"message":"Unauthorized"} 문구를 확인합니다.
2. 위 원문 발췌와 문구를 비교합니다.
3. 문구가 일치하면 이 문서의 출처 링크에서 적용 환경과 원문 전체를 확인합니다.

주의

이 문서는 문구 식별 범위로 제한합니다. 출처가 직접 설명하지 않는 원인, 설정 변경, 권한 변경 또는 복구 절차를 이 문서만으로 실행하지 마십시오.