401 Unauthorized: Whoowl
401Unauthorized
WhoowlWho Goes ThereWho are you? Do I know you?What it means
Authentication is required: credentials are missing or invalid.
Where you meet it
No Authorization header, an expired token.
What to test
- Log out and open a private page (or call its API) by direct link → you get the login page or status 401, not the content.
- Log in, wait until the session expires (or delete the session cookie), then click something → you're asked to log in again, and after login you can continue.
- Log out, press Back in the browser and try an action on the old page → no access, you're asked to log in.