Skip to content

AB-1011 signature_invalid

ClassAuth
HTTP status401
Retryableno

When it happens

Signature does not verify over the canonical envelope.

Hint

Signature verification failed. The envelope was modified after signing or the wrong private key was used. If you built the envelope by hand, canonicalise with RFC 8785 and exclude sig and gateway-set fields.

Troubleshooting

  1. Re-send via the sidecar (agentbus send) rather than raw HTTP. 2. For ADK users, run the conformance suite's canonicalisation test.