# {"message":"missing, malformed, expired or otherwise invalid token provided"}

**URL:** <https://community.vikunja.io/t/message-missing-malformed-expired-or-otherwise-invalid-token-provided/2036>\
**Category:** Bug\
**Created:** [22 February 2024 11:13 UTC](https://community.vikunja.io/t/message-missing-malformed-expired-or-otherwise-invalid-token-provided/2036 "2024-02-22T11:13:53Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![gezuka77](https://community.vikunja.io/user_avatar/community.vikunja.io/gezuka77/32/1068_2.png) [@gezuka77](https://community.vikunja.io/u/gezuka77)\
**Post date:** [22 February 2024 11:13 UTC](https://community.vikunja.io/t/message-missing-malformed-expired-or-otherwise-invalid-token-provided/2036/1 "2024-02-22T11:13:53Z")

</div>

Hi,

I have a Vikunja docker instance set-up to work with Authentik SSO. I use Traefik reverse proxy.  
Everything seems to be working fine, but after a day or so I am getting:

> An error occurred: Error while refreshing user info: Please check if the api url is correct.

and when I check with [https://vikunja.mysite.io/api/v1](https://vikunja.mysite.io/api/v1) I am getting the error in the title:

> {“message”:“missing, malformed, expired or otherwise invalid token provided”}

When I empty the cache or use incognito browser I can get the service work again.

Clearly there is a token caching issue.

Anyone seen this before or have a working setup with Authentik/Traefik?

Thanks!

---

<div class="post-metadata">

**Author:** ![kolaente](https://community.vikunja.io/user_avatar/community.vikunja.io/kolaente/32/5_2.png) [@kolaente](https://community.vikunja.io/u/kolaente)\
**Post date:** [24 February 2024 17:30 UTC](https://community.vikunja.io/t/message-missing-malformed-expired-or-otherwise-invalid-token-provided/2036/2 "2024-02-24T17:30:39Z")

</div>

This sounds like your token simply expired.

Did you set a [jwt secret](https://vikunja.io/docs/config-options/#jwtsecret) in your config and if not, did you restart Vikunja? Did you use Vikunja within the last 72h before getting the error message?

> [@gezuka77](#):
>
> and when I check with [https://vikunja.mysite.io/api/v1](https://vikunja.mysite.io/api/v1) I am getting the error in the title:

That will never work, because your browser does not send the api token by default.