Problem type
Authentication required
unauthenticated
What it means
No credential, or one that does not verify — invalid, expired, for another issuer or audience, or signed with an unknown key. One answer for all of them; WWW-Authenticate: Bearer is set (on the account API, only when no credential was sent). The SDK middleware in your own API answers the same way.
What to do
Send a valid bearer token for this issuer and audience; get a new one if it has expired.