Sep24AuthenticationRequiredException

Exception thrown when SEP-24 authentication is required but missing or invalid.

Indicates that the request requires a valid SEP-10 JWT token that is either missing, expired, or invalid. All SEP-24 endpoints except /info require authentication. This error typically occurs when:

• JWT token is not provided in the Authorization header

• JWT token has expired

• JWT token is malformed or tampered with

• JWT token signature is invalid

• Token was issued for a different anchor

Recovery actions:

• Authenticate via SEP-10 WebAuth to obtain a fresh JWT token

• Verify the token is being sent in the Authorization header

• Check that the token was issued by the correct anchor

Example - Handle authentication failure:

suspend fun initiateDeposit(
    sep24Service: Sep24Service,
    webAuth: WebAuth,
    assetCode: String,
    accountId: String,
    keyPair: KeyPair
): Sep24DepositResponse? {
    var jwt = getCachedJwt()

    try {
        return sep24Service.deposit(assetCode, jwt)
    } catch (e: Sep24AuthenticationRequiredException) {
        println("Authentication required, re-authenticating...")

        // Obtain fresh token via SEP-10
        val authToken = webAuth.jwtToken(
            clientAccountId = accountId,
            signers = listOf(keyPair)
        )
        jwt = authToken.token
        cacheJwt(jwt)

        // Retry with new token
        return sep24Service.deposit(assetCode, jwt)
    }
}

See also:

• Sep24Exception base class

• WebAuth for SEP-10 authentication

• SEP-0010 Specification

• SEP-0024 Specification