Client Status Codes: Authorization

The below table provides the status codes and their descriptions, expected UI behavior (if applicable), and comments to include if you report the error to Verimatrix Customer Care.

HTTP Error codeMessageDescriptionMDRM Error code
401Failed to decode JSON web tokenThe Authorization token in the header of the Content encryption request or get License request is incorrect.MDRM-502
401Authorization token is requiredThe Authorization token itself is missing in the header of the Content encryption request or get License request.MDRM-501
401Failed to resolve JSON web keyMDRM-504
401JSON web token is invalidMDRM-505
401Failed to resolve session JSON web keyMDRM-506
401JSON web token is expiredThe exp claim present in the paylaod of the JWT token sent via the header of the License request value is expired.MDRM-508
401JSON web token is missing issued at (iat) claimThe keyId claim present in the header of the JWT token sent via the header of the License request value is disabled.MDRM-509
401JSON web token is inactive and may not be processed before the not before (iat) claim timestampThe iat claim present in the payload of the JWT token sent via the header of the License request epoch value is at a later time.MDRM-510
401JSON web token is inactive and may not be processed before the not before (nbf) claim timestampThe nbf claim present in the payload of the JWT token sent via the header of the License request epoch value is at a later time.MDRM-511
401Failed to retrieve signing key from the databaseThe keyId claim present in the header of the JWT token sent via the header of the License request value is already deleted.MDRM-512
401Failed to decode JSON web token; malformedMDRM-502
401JSON web key is disabledThe keyId claim present in the header of the JWT token sent via the header of the License request value is already disabled.MDRM-513
403Recipient does not allow access for specified audienceThe aud claim present in the payload of the JWT token sent via the header of the License request value is incorrect. It is restricted to the scope during the creation/import of signing key.MDRM-503
400Malformed request, missing or invalid parameterThe kid, issuer or subject is not in the query parameters while sending request to CPIX using a signed CPIX document in the request body.MDRM-912
500An unexpected error occurred while processing the requestGeneric errorMDRM-500
500Unable to sign session JSON web tokenThe encode JWT token with private key does not match with the public key present in the database.MDRM-507