Pro tip: Capture the traffic with Wireshark or Fiddler.
Sometimes the error isn’t what the server *says* it is. Saw a case where a load balancer was stripping auth headers silently.
Also, check if your API has rate limits—some return 401 instead of 429 (??).
Sometimes the error isn’t what the server *says* it is. Saw a case where a load balancer was stripping auth headers silently.
Also, check if your API has rate limits—some return 401 instead of 429 (??).