401 Unauthorized

Error

Error Reasons

1. Domain is not listed in the "Allowed Domain" settings.

2. If you're using an app, the bundle's allow list should match the app's bundle name.

3. secretKey is not provided when using the SDK via the backend.

Solution

• For Allowed Domains
1. Visit the settings for your API key on the thirdweb dashboard

2. Click on the “Edit” Button and view the settings for allowed domains

3. Enter your domain in the allowed domain section & save your settings.
• Use * to authorize all subdomains. Example: *.thirdweb.com accepts all sites ending in .thirdweb.com.
• Enter localhost:<port> to authorize local URL





 

• For Bundle Allow List
1. Visit the settings for your API key on the thirdweb dashboard

2. Click on the “Edit” Button and under "Access Restrictions” head over to “Bundle IDs (iOS, Andriod, Games)

3. Enter you app name in the “Allowed Bundle IDs” input & click on “Save”

• For Secret Key Issue

If you're utilizing the SDK from a backend, it's essential to provide a secretkey instead of a clientId. You can obtain a secret key from the thirdweb dashboard for proper authentication and security measures.

Example Code Block:

import { ThirdwebSDK } from "@thirdweb-dev/sdk";
 
const sdk = new ThirdwebSDK("sepolia", {
  secretKey: process.env.THIRDWEB_SECRET_KEY,
});