# Error "Subgraph errors redacted" authorization header token

**URL:** <https://community.apollographql.com/t/error-subgraph-errors-redacted-authorization-header-token/6911>\
**Category:** GraphOS\
**Tags:** studio\
**Created:** [November 4, 2023, 12:10pm UTC](https://community.apollographql.com/t/error-subgraph-errors-redacted-authorization-header-token/6911 "2023-11-04T12:10:02Z")\
**Posts on this page:** 9\
**Page:** 1

<div class="post-metadata">

**Author:** ![AninaL](https://sea1.discourse-cdn.com/flex019/user_avatar/community.apollographql.com/aninal/32/4709_2.png) [@AninaL](https://community.apollographql.com/u/AninaL)\
**Post date:** [November 4, 2023, 12:10pm UTC](https://community.apollographql.com/t/error-subgraph-errors-redacted-authorization-header-token/6911/1 "2023-11-04T12:10:02Z")

</div>

Hi,

we use apollo studio to test our Endpoints to strapi. We secured the Strapi endpoint with an access token. I followed the docs on how to add a token into the header, but i don’t get any responses.

what i did so far:

- the token is right. Tested in postman and it is working fine.
- set the token as Environment variables in the Personal Settings
- added the token in the header

Thanks for help.

 ![Screenshot 2023-11-04 at 12.54.40](https://us1.discourse-cdn.com/flex019/uploads/apollographql/original/2X/6/6b76730d44e422e3a509262edc080aa7b1fd3af0.png)

---

<div class="post-metadata">

**Author:** ![mikeq](https://sea1.discourse-cdn.com/flex019/user_avatar/community.apollographql.com/mikeq/32/3887_2.png) [@mikeq](https://community.apollographql.com/u/mikeq)\
**Post date:** [November 5, 2023, 11:27am UTC](https://community.apollographql.com/t/error-subgraph-errors-redacted-authorization-header-token/6911/2 "2023-11-05T11:27:34Z")

</div>

Hi,

Are you using Apollo Router or Apollo/Gateway & server?

In either case are you passing the Authorization header from the supergraph down to your subgraph?

---

<div class="post-metadata">

**Author:** ![AninaL](https://sea1.discourse-cdn.com/flex019/user_avatar/community.apollographql.com/aninal/32/4709_2.png) [@AninaL](https://community.apollographql.com/u/AninaL)\
**Post date:** [November 6, 2023, 7:25am UTC](https://community.apollographql.com/t/error-subgraph-errors-redacted-authorization-header-token/6911/3 "2023-11-06T07:25:47Z")

</div>

hi mikeq,  
thanks for your reply. I’m new to apollo, so please apologise my maybe obvious questions.

> [@mikeq](#):
>
> are you passing the Authorization header from the supergraph down to your subgraph?

what do you mean by this? Where can i set the header in the supergraph? I don’t see any subgraphs in the settings, so i havn’t set up any.

best,  
Anina

---

<div class="post-metadata">

**Author:** ![mikeq](https://sea1.discourse-cdn.com/flex019/user_avatar/community.apollographql.com/mikeq/32/3887_2.png) [@mikeq](https://community.apollographql.com/u/mikeq)\
**Post date:** [November 6, 2023, 7:34am UTC](https://community.apollographql.com/t/error-subgraph-errors-redacted-authorization-header-token/6911/4 "2023-11-06T07:34:55Z")

</div>

Is this an out the box GraphQL API or one you have created?

If it is an out the box API I’d try making calls to it in Postman (you can do GraphQL queries in that) that will help figure out if it is an Apollo Sandbox issue or their API. (or you could even use Curl).

I would also initially bring back as few fields as possible, maybe just {stories { data { attributes { category } } } }.

Maybe link to the documentation of the API config settings.

---

<div class="post-metadata">

**Author:** ![AninaL](https://sea1.discourse-cdn.com/flex019/user_avatar/community.apollographql.com/aninal/32/4709_2.png) [@AninaL](https://community.apollographql.com/u/AninaL)\
**Post date:** [November 6, 2023, 8:04am UTC](https://community.apollographql.com/t/error-subgraph-errors-redacted-authorization-header-token/6911/5 "2023-11-06T08:04:09Z")

</div>

hi,

thanks for the fast reply.  
It is an out of the box API and i already tested that in Postman and it is working fine. So thats why i came across this forum, bc it seems to be an Apollo Sandbox issue or i’m just missing a setting.

best,  
Anina

---

<div class="post-metadata">

**Author:** ![mikeq](https://sea1.discourse-cdn.com/flex019/user_avatar/community.apollographql.com/mikeq/32/3887_2.png) [@mikeq](https://community.apollographql.com/u/mikeq)\
**Post date:** [November 6, 2023, 8:50am UTC](https://community.apollographql.com/t/error-subgraph-errors-redacted-authorization-header-token/6911/6 "2023-11-06T08:50:03Z")

</div>

Not much help to you, but I have similar for my APIs and it works fine. Only thing I can think of is it is a CORS issue.

 ![image](https://us1.discourse-cdn.com/flex019/uploads/apollographql/original/2X/0/02fccf690c4affc883a56820d83b943341a37d64.png)

---

<div class="post-metadata">

**Author:** ![AninaL](https://sea1.discourse-cdn.com/flex019/user_avatar/community.apollographql.com/aninal/32/4709_2.png) [@AninaL](https://community.apollographql.com/u/AninaL)\
**Post date:** [November 7, 2023, 10:16am UTC](https://community.apollographql.com/t/error-subgraph-errors-redacted-authorization-header-token/6911/7 "2023-11-07T10:16:08Z")

</div>

thanks for your help. I know why it didn’t work, you need to send the authorization when you create the subgraph…at least when you use the strapi api

---

<div class="post-metadata">

**Author:** ![Kyle\_Gray](https://sea1.discourse-cdn.com/flex019/user_avatar/community.apollographql.com/kyle_gray/32/4936_2.png) [@Kyle\_Gray](https://community.apollographql.com/u/Kyle_Gray)\
**Post date:** [February 29, 2024, 11:05am UTC](https://community.apollographql.com/t/error-subgraph-errors-redacted-authorization-header-token/6911/8 "2024-02-29T11:05:45Z")

</div>

Okay, I am getting the same error and I would like to fix it because Postman is limited on the api calls

---

<div class="post-metadata">

**Author:** ![Justin\_Gonzalez](https://sea1.discourse-cdn.com/flex019/user_avatar/community.apollographql.com/justin_gonzalez/32/5359_2.png) [@Justin\_Gonzalez](https://community.apollographql.com/u/Justin_Gonzalez)\
**Post date:** [February 6, 2025, 8:48pm UTC](https://community.apollographql.com/t/error-subgraph-errors-redacted-authorization-header-token/6911/9 "2025-02-06T20:48:08Z")

</div>


