unauthenticated

HTTP 401   title: Not authenticated

What it means

The Bearer token was missing, invalid, expired, issued by a different issuer, or revoked. Every endpoint under the mount except schema is authenticated.

What to do next

Get a token by proving possession of your key: GET <endpoint>/auth/challenge?public_key=…, sign {aud, nonce, jti} as a compact RS256 JWS (aud is the origin you dialed), then POST <endpoint>/auth/register for a new key or POST <endpoint>/auth/login for one already registered. Retry the original call with Authorization: Bearer ….

On the wire

{
  "type":   "https://kiosk.tech/problems/unauthenticated",
  "title":  "Not authenticated",
  "status": 401,
  "detail": "… what went wrong on THIS request …",
  "code":   "unauthenticated"
}

This page documents the RFC 9457 type URI https://kiosk.tech/problems/unauthenticated. The URI is an identifier, not a locator a client should fetch: branch on the document’s code member. The normative definition lives in the error vocabulary of the Kiosk specification (§9 of the formal spec).