# Square payment failed UNAUTHORIZED

**URL:** <https://developer.squareup.com/forums/t/square-payment-failed-unauthorized/1896>\
**Category:** Questions\
**Created:** [February 19, 2021, 1:05am UTC](https://developer.squareup.com/forums/t/square-payment-failed-unauthorized/1896 "2021-02-19T01:05:01Z")\
**Posts on this page:** 4\
**Page:** 1

<div class="post-metadata">

**Author:** ![GinaBarton](https://avatars.discourse-cdn.com/v4/letter/g/7ea924/32.png) [@GinaBarton](https://developer.squareup.com/forums/u/GinaBarton)\
**Post date:** [February 19, 2021, 1:05am UTC](https://developer.squareup.com/forums/t/square-payment-failed-unauthorized/1896/1 "2021-02-19T01:05:01Z")

</div>

We have a website set up for payments thru Square. All of a sudden it is not accepting payments and says the following:

Square Payment Failed (Status code UNAUTHORIZED: The ‘Authorization’ http header of your request was incorrect or expired. The header value is expected to be of the format “Bearer TOKEN” (without quotation marks), where TEN is a valid access token (e.g. “Bearer  
ABC123def456GHI789jk10”). For more information, see [Square Connect API Documentation](https://developer.squareup.com/docs/)

I spoke to Go Daddy who built our website and is maintaining it. They had one of their engineers check it on their end and they cannot see anything wrong. So I’m back to you guys. Can you help me get this fixed (I am not a tech person) so I will need your help. We are not able to accept payments on our website so that isn’t good for business. I’ve sent a request for someone to help in a separate email but I’m adding this request in too.

---

<div class="post-metadata">

**Author:** ![sjosey](https://sea1.discourse-cdn.com/square/forums/user_avatar/developer.squareup.com/sjosey/32/40_2.png) [@sjosey](https://developer.squareup.com/forums/u/sjosey)\
**Post date:** [February 19, 2021, 5:10pm UTC](https://developer.squareup.com/forums/t/square-payment-failed-unauthorized/1896/2 "2021-02-19T17:10:33Z")

</div>

Hi @GinaBarton welcome to the forums.

Typically the only reason `UNAUTHORIZED` errors occur are due to invalid access tokens. As far as I know, GoDaddy uses OAuth, which means they generate the access tokens on your behalf, so they’re passing an invalid access token to Square. It’s possible the token has expired, in which case they should renew the token (which, again, can only be done by GoDaddy unfortunately), or if you remove and re-add the integration, it probably will auto-renew (they shouldn’t make you do this, though). Since they use OAuth, there’s nothing Square can do to resolve the issue, as the request comes directly from GoDaddy, and we do not have access to their code to change.

---

<div class="post-metadata">

**Author:** ![allysondvc](https://avatars.discourse-cdn.com/v4/letter/a/46a35a/32.png) [@allysondvc](https://developer.squareup.com/forums/u/allysondvc)\
**Post date:** [October 25, 2021, 6:39pm UTC](https://developer.squareup.com/forums/t/square-payment-failed-unauthorized/1896/3 "2021-10-25T18:39:10Z")

</div>

This also happened to us, we are using Wordpress and Woocommerce. I was hoping to find answer too. We are using AWS, This is the payment log:

_Square Payment Failed (Status code UNAUTHORIZED: The `Authorization` http header of your request was incorrect or expired. The header value is expected to be of the format “Bearer TOKEN” (without quotation marks), where TOKEN is a valid access token (e.g. “Bearer A_\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*”). For more information, see [https://developer.squareup.com/docs/build-basics/using-rest-api#](https://developer.squareup.com/docs/build-basics/using-rest-api#) **set-the-headers**.)\*

---

<div class="post-metadata">

**Author:** ![Bryan-Square](https://sea1.discourse-cdn.com/square/forums/user_avatar/developer.squareup.com/bryan-square/32/38_2.png) [@Bryan-Square](https://developer.squareup.com/forums/u/Bryan-Square)\
**Post date:** [October 25, 2021, 9:42pm UTC](https://developer.squareup.com/forums/t/square-payment-failed-unauthorized/1896/4 "2021-10-25T21:42:21Z")

</div>

👋 WooCommerce uses OAuth and they are the ones that pass the token in the request. Have you reached out to them with this issue yet? 🙂
