EC
498
HTTPERRORNotable4xx Client Error (Unofficial)MEDIUM confidence

Invalid Token

Production Risk

Low — application-level token expiry. Implement automatic token refresh in the client.

What this means

498 Invalid Token is used by Esri's ArcGIS Server to indicate that an authentication token provided in the request is invalid, expired, or not authorised for the requested operation.

Why it happens
  1. 1The ArcGIS token has expired.
  2. 2The token was generated for a different server or application.
  3. 3The token was revoked by the administrator.
  4. 4The token was provided in the wrong parameter or header.
How to reproduce

An ArcGIS client application makes a request with an expired or invalid token.

trigger — this will error
trigger — this will error
GET /arcgis/rest/services/MyMap/MapServer?f=json&token=expired_token_here HTTP/1.1
Host: gis.example.com

expected output

HTTP/1.1 498 Invalid Token

Fix

Generate a new ArcGIS token

WHEN The token has expired.

Generate a new ArcGIS token
POST /arcgis/tokens/generateToken HTTP/1.1
Content-Type: application/x-www-form-urlencoded

username=user&password=pass&f=json&expiration=60

Why this works

Obtains a fresh token from the ArcGIS token endpoint.

Version notes
ArcGIS Server

Esri ArcGIS Server-specific. Not a standard IETF code.

Content generated with AI assistance and reviewed for accuracy. Found an error? hello@errcodes.dev

← All HTTP errors