# Unsigned token

Resolve unsigned token errors.

The application [requires signed tokens](/explanation/application/signed-tokens#how-to-enforce-signed-tokens), but the `X-Token` provided in the request is unsigned.

[Sign the token](/explanation/application/signed-tokens#signed-tokens) in your backend before forwarding it.

## Response

All error responses follow the [Problem Details (RFC 9457)](/reference/api/overview#errors) format. The `type`, `title`, `status`, and `detail` fields are always present, while `instance` may be omitted depending on the API.

Here is an example of the response returned for this error:

```json
{
  "type": "https://croct.help/api/authentication/unsigned-token",
  "title": "The token is unsigned.",
  "status": 401,
  "detail": "The application requires a signed token, but an unsigned token was provided.",
  "instance": "/client/web/content"
}
```