Skip to content

Commit ec6ece5

Browse files
committed
Fix text
1 parent b544c19 commit ec6ece5

File tree

1 file changed

+7
-1
lines changed

1 file changed

+7
-1
lines changed

aspnetcore/security/authentication/configure-jwt-bearer-authentication.md

Lines changed: 7 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -80,7 +80,13 @@ When using JWT access tokens for API authorization, the API grants or denies acc
8080

8181
### 401 Unauthorized
8282

83-
A 401 response is returned when the access token has an invalid standard requirement. The OAuth specifications are clear which claims must be valid and how to validate the claims in the access token. This could be the wrong signature, or the token has expired or one of the required claims like the audience or the issuer is incorrect.
83+
A 401 Unauthorized response indicates that the provided access token doesn't meet the required standards. This could be due to several reasons, including:
84+
85+
* **Invalid signature**: The token's signature doesn't match, suggesting potential tampering.
86+
* **Expiration**: The token has expired and is no longer valid.
87+
* **Incorrect claims**: Critical claims within the token, such as the audience (`aud`) or issuer (`iss`), are missing or invalid.
88+
89+
The [OAuth specifications](https://auth0.com/docs/authenticate/protocols/oauth) provide detailed guidelines on the required claims and their validation.
8490

8591
### 403 Forbidden
8692

0 commit comments

Comments
 (0)