This incident is resolved. All API traffic has been served normally since 14:20 UTC.
Between 19:01 PDT on October 24 and 07:17 PDT on October 25, a configuration issue caused some session-authenticated requests to fail with 401 Unauthorized. API-key requests were unaffected, no data was affected, and existing sessions remain valid — no action is required.
Resolved
This incident is resolved. All API traffic has been served normally since 14:20 UTC.
Between 19:01 PDT on October 24 and 07:17 PDT on October 25, a configuration issue caused some session-authenticated requests to fail with 401 Unauthorized. API-key requests were unaffected, no data was affected, and existing sessions remain valid — no action is required.
Monitoring
We've corrected the configuration and restored normal traffic. API error rates have been at baseline since 14:20 UTC.
We're monitoring before marking this resolved.
Identified
We've identified the cause of the 401 Unauthorized errors some API requests have received since 19:01 PDT yesterday: a configuration issue affecting session-based authentication. Requests authenticated with an API key were not affected.
We've rolled the affected traffic back while we correct the configuration. Error rates are returning to normal; we'll update within the hour.
