Helpful information to decode and resolve HTTP errors
Troubleshooting information is categorized by HTTP status codes, 4xx (client error) and 5xx (server error). When finding the right troubleshooting information, look up the HTTP status code number and error type. Then select the error message that matches what you received. This message expands to display content with potential reasons for the error and steps to resolve.
Jump to the HTTP status code
400 | 401 | 403 | 404 | 405 | 413 | 415 | 429 | 500 | 502 | 503 | 504
400
Bad Request
Decompression failure at request
You may not have the correct Content-Type specified in your request header or may need to define the Content-Encoding header in your request.
When you get this error, it means the payload format that was sent as part of the HTTP request does not match the encoding format specified in the Content-Encoding header.
- The content type header defines the media type sent over HTTP. Valid values include application/json, application/xml, or application/x-www-form-urlencoded.
- The content encoding header defines how to modify the content before it is sent. Content encoding compresses content without removing any information about the original media type. Valid values include gzip or deflate.
How to resolve
- Verify that your request header
Content-Typeis correct. - Resubmit request.
- If the same error is received, add the
Content-Encodingheader to the request. Choose one of these compression values: gzip or deflate. All options use a form of LZ77, a basic algorithm for compression that finds and replaces repeated patterns in data with references to where those patterns first appeared. This makes files smaller and faster to transfer or store. If you don't know what to choose, reach out Support to help determine the best compression type for your data.- gzip: This is a way of making files smaller for transfer. A 32-bit CRC (Cyclic Redundancy Check) is added to help detect errors during transfer. gzip is the original method used by the UNIX gzip program.
- deflate: deflate is a compression method that combines the LZ77 algorithm with another technique called Huffman coding, which further reduces file size by sorting data according to how often it appears. This format is packaged inside something called a zlib structure.
HTTP request contains duplicate headers
There is a header that appears more than once with the same or different values as part of the HTTP request.
How to resolve
Reach out to the Support team and ask them to review the logs. When looking at the data, the support teams will locate which header(s) are triggering a message about duplicates. The the Support team will work with you to correct the headers and then you can resubmit the request.
No required SSL certificate was sent
This typically occurs when something isn’t right with your certificate, like one of these reasons:
- The certificate expired.
- KeyBank does not have the correct or current certificate.
- Missing the client root certificate in your trust store.
- Certificate does not load correctly because of import method, certificate store settings, or browser settings.
How to resolve
Whatever the reason, certificates can be complicated so let us help you. Contact Support to verify the health of your certificate and start working on getting that secure handshake between partners, partner.
Missing Data
Mandatory data not provided {path and issue}, please verify the data and resubmit the request
Your request failed validation because the required data is missing or the acceptable criteria was not met. Look at error message details to see what data field is missing or incorrect.
How to resolve
- Review the API documentation for your request.
- Make sure any fields marked required have values.
- Make sure each value present abides by the format limitations set by the API. This should be defined in the field description as well as the specifications itself.
- Retry the request.
- If the error continues to occur, reach out to Support for help troubleshooting the issue.
401
Unauthorized
Received request is unauthorized (Invalid access token), please provide valid credentials
The access token in the request is either missing or not in the correct field.
How to resolve
- Review your request headers. Make sure that the correct access token is defined in the Authorization field.
- Correct and resubmit your request.
- If you get the error again, you may need to generate a new token.
Received request is unauthorized (Access token expired), please provide valid credentials
The access token in the request has expired.
How to resolve
You need to generate a new access token and re-submit the request with the new token. See Access Token documentation for the basic cURL command.
403
Forbidden
Access to requested resource is forbidden
You may not have access to this API product.
How to resolve
Review your access token respond or request a new access token to view the field api_product_list. The api_product_list lists the resources you have permission to access.
Whether you see the resource or not, we recommend you contact us with the the Client Support team. If you don’t see the API resource, you need to request access. If you do see the API resource in your list, but can’t access it, you still need to contact us so that we can help correct the issue.
404
Not found
Unable to identify proxy for host: {virtual host} and url: {path}
You may not have access to this API product.
How to resolve
The hostname and path of the API URL do not match the API proxy or the proxy is not associated with the virtual host.
How to resolve
Make sure you are using the correct hostname and proxy name. If everything looks correct on your end, time to escalate using our the Client Support team form. The support team will review the logs to check the configuration and make any corrections as necessary.
405
Method not allowed
Unable to identify proxy for host: {virtual host} and url: {path}
<
It has to be not only what you say, but how you say it. The HTTP method used for the request is not correct.
How to resolve
With KeyBank API products, the method of the API call will be either GET or POST. Check the API specifications to make sure you are using the correct method. In simple terms, the GET method is to get data and the POST method is to send data.
413
Body buffer overflow
Request entity too large
The size of the request or the respond payload is exceeding the allowed size.
How to resolve
Reach out to the the Support teams to review the logs and view the limit threshold that was reached. If you need a higher transmission volume for requests and/or responds, you can work with your TAM for possible alternative configurations.
415
Unsupported media type
Requested method is not allowed, please verify the method and resubmit request
You may not have the correct Content-Type or Accept specified in your request header or may need to define the Content-Encoding header in your request.
How to resolve
Verify that your request header fields are correct based on the API specifications and resubmit the request. If the same error is received, escalate to support for help with the the Client Support team Form.
429
Too many requests
Number of requests threshold reached, please resubmit the request after sometime
The request has exceeded the rate limit. Going beyond the rate limit is being triggered by the number of connections your app is making to the API or a severe traffic spike affecting performance.
How to resolve
Verify with the support team that the limit threshold is causing the error. If so, work with your TAM to find a solution or assess if a rate limit change is necessary. For most APIs, the rate limit is set to 5 TPS (read more about Rate Limiting).
500
Internal server error
Unknown error occurred(Source variable : request.header.Authorization for basic authentication decode policy is not valid), please check and resubmit the request
Your application credentials are not correct in your request header, in particular the consumer_key.
How to resolve
Contact Support with the credentials you are using in the Authorization header. Support will verify and provide the correct credentials.
Unknown error occurred(Unresolved variable : request.header.Authorization), please check and resubmit the request
When you sent the request, the Authorization header was missing. This field is required and acts as a passport to access and use the API product.
How to resolve
Resubmit the request with the Authorization header defined. <access token topic link>. If you resubmit with the Authorization header complete and still receive this error, escalate to the the Client Support team Form.
Unknown error occurred(Bad Form Data), please resubmit the request
There is a field value in your request that is using characters that are not allowed or do not conform to the required format.
How to resolve
- Verify the API URL to make sure there are no erroneous characters in the path.
- Make sure the parameters being sent match the requirements and conditions specified in the API specifications. <link to special characters topic?>
- If the request looks correct and accurate, escalate to the Client support.
502
Bad gateway
Bad Gateway(Unexpected EOF at target), please check and resubmit the request
When the request was sent, an error occurred with the secure SSL/TLS connections or there was a backend server timeout.
How to resolve
Reach out to support using the the Client Support team Form. The team will check the logs to verify that the backend service was available and if there is a pattern of timeouts for a particular API service. This is an error that must be corrected by KeyBank.
503
Service unavailable
Service is currently unavailable (The Service is temporarily unavailable), please resubmit the request
You cannot connect to our API services because a backend service is unavailable, the target endpoint may not be enabled, or the host alias is not correctly configured.
How to resolve
Use the Client Support form to report an outage or contact your TAM directly. A service outage is a high priority issue that KeyBank aims to resolve quickly.
Service is currently unavailable(SSL Handshake Failure), please resubmit the request.
Your certificate chain is incomplete or has expired with KeyBank.
How to resolve
Reach out to Support to check on the health and completeness of your certificate chain. This issues will be handled.
504
Gateway timeout
Request could not be processed on time(Gateway Timeout), please wait a moment and resubmit the request
This is on us. The backend service is taking too long to response.
How to resolve
Reach out to the support team to report and correct this issue.