How to complete the challenge POST /secret/note (401)

By Alan Richardson · Published 2026-07-31

Use POST /secret/note with a valid JSON note payload, but do not include the X-AUTH-TOKEN header.

The challenger header still identifies your session, but the missing auth token means the API should return 401.

Try it now

POST /secret/note without an auth token to trigger 401

Experiment with this endpoint