Discussions
Back to 7shifts.comBecome a Partner

Discussions

Ask a Question
Back to all

Access Token returns 401 "JWT string must have two dots" access_denied

16 days ago by thierry

i, I'm getting a persistent 401 when calling GET https://api.7shifts.com/v2/companies using a personal Access Token generated in Settings → Developer Tools → Access Tokens (not an OAuth App I don't see that option in my account's Developer Tools).

Request:

Authorization: Bearer {access_token}

Response (identical across 3 separately generated tokens, each with a valid active admin as technical contact):

json {"error":"access_denied","error_description":"The resource owner or authorization server denied the request.","detail":"The JWT string must have two dots"}

I've confirmed the Authorization header is sent intact (verified via an HTTP header-echo test), so this isn't a client-side formatting issue. Is there an account-level setting that needs to be enabled for Access Token API access, or is this a known bug with the auth gateway treating non-JWT bearer tokens incorrectly?