# Bearer token with x-api-key - 401

**URL:** <https://community.parabola.io/t/bearer-token-with-x-api-key-401/2708>\
**Category:** Ask a question\
**Tags:** Using-APIs\
**Created:** [April 3, 2023, 10:43am UTC](https://community.parabola.io/t/bearer-token-with-x-api-key-401/2708 "2023-04-03T10:43:47Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![JamesF](https://avatars.discourse-cdn.com/v4/letter/j/35a633/32.png) [@JamesF](https://community.parabola.io/u/JamesF)\
**Post date:** [April 3, 2023, 10:43am UTC](https://community.parabola.io/t/bearer-token-with-x-api-key-401/2708/1 "2023-04-03T10:43:47Z")

</div>

I cant connect to the Retail Express API using Expiring Tokens  
I have setup the POST request type in the Account

 ![image](https://us1.discourse-cdn.com/flex020/uploads/parabola/original/2X/3/324559c5e78a84c0e63025a6d6c7b11eae423055.png)

The help docs for Parabola say that the token will be passed as a bearer token by default, however I am not seeing this in the requests. I have tried configuring the Advance Options in the account to show the token, and also the Bearer token setting in Authentication. Still no luck.

The instructions from Retail Express are:  
_Requests to other endpoints in the API must include this token (in the **Authorization** header parameter) and the API Key (again in the **x-api-key** header parameter):_

_`Authorization: Bearer eyJhbmdWxsX2FjY2VzcyJdfQ.IWPofNEfIu-xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx`_  
_`x-api-key: hkldfhTYDnhlkadsfadsdfTYSDFNFDSF`_

_Once a token expires, the same call to the Authentication Token endpoint is required to retrieve a new token. Once a token has expired, or if an invalid token is passed, a 401 Unauthorised response will be returned._

When I add the token in manually as Bearer XXXXX… it connects fine, however I cant seem to pass the token into the Authorization header

---

<div class="post-metadata">

**Author:** ![Emory\_Stainbrook](https://sea2.discourse-cdn.com/flex020/user_avatar/community.parabola.io/emory_stainbrook/32/1772_2.png) [@Emory\_Stainbrook](https://community.parabola.io/u/Emory_Stainbrook)\
**Post date:** [April 3, 2023, 5:06pm UTC](https://community.parabola.io/t/bearer-token-with-x-api-key-401/2708/2 "2023-04-03T17:06:44Z")

</div>

Hi @JamesF - Happy to take a look! It looks like they are returning the token as “access\_token”. If you update the Advanced settings like this, do you see the API connecting?

![Screen Shot 2023-04-03 at 1.03.51 PM](https://us1.discourse-cdn.com/flex020/uploads/parabola/original/2X/7/708378fcba610d9199e6b09753e51c07c8fd1731.png)

If not, could you please send over a link to your Flow to [help@parabola.io](mailto:help@parabola.io) so we can take a look at how that authorization is set up?

---

<div class="post-metadata">

**Author:** ![JamesF](https://avatars.discourse-cdn.com/v4/letter/j/35a633/32.png) [@JamesF](https://community.parabola.io/u/JamesF)\
**Post date:** [April 3, 2023, 8:44pm UTC](https://community.parabola.io/t/bearer-token-with-x-api-key-401/2708/3 "2023-04-03T20:44:12Z")

</div>

Hi Emory  
I had tried that, and get an error when trying to authorise.

 ![image](https://us1.discourse-cdn.com/flex020/uploads/parabola/original/2X/c/c1e3256f875efa0becbe81945ba0c5dca0d7b8d4.png)

I have sent through a link to help