# Unauthenticated desc = unable to parse jwt token:Token is expired

**URL:** <https://discuss.dgraph.io/t/unauthenticated-desc-unable-to-parse-jwt-token-token-is-expired/8010>\
**Category:** Ratel\
**Tags:** status:accepted, kind:bug, ratel, area:commercial:acl\
**Created:** [September 30, 2019, 6:25pm UTC](https://discuss.dgraph.io/t/unauthenticated-desc-unable-to-parse-jwt-token-token-is-expired/8010 "2019-09-30T18:25:21Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![diggy](https://yyz1.discourse-cdn.com/flex007/user_avatar/discuss.dgraph.io/diggy/32/3666_2.png) [@diggy](https://discuss.dgraph.io/u/diggy)\
**Post date:** [September 30, 2019, 6:25pm UTC](https://discuss.dgraph.io/t/unauthenticated-desc-unable-to-parse-jwt-token-token-is-expired/8010/1 "2019-09-30T18:25:21Z")

</div>

**Moved from GitHub [ratel/128](https://github.com/dgraph-io/ratel/issues/128)**

_Posted by_ [danielmai](https://github.com/danielmai):

Ratel cannot run any operations that require authentication after the ACL access TTL expires.

Steps to reproduce:

1. Run a Dgraph cluster with a short access TTL:

2. Log in as groot in Ratel.

3. Take a breather for 3 seconds to let the TTL expire.

4. Try to add a user, which results in this error:

![image](https://canada1.discourse-cdn.com/flex007/uploads/dgraph/original/2X/d/ddfef03b109d9366eb6d7d72ae6804904546126a.png)

The dev tools network inspector shows the reason for the error for the /mutate request:

```auto
{"errors":[{"message":"rpc error: code = Unauthenticated desc = unable to parse jwt token:Token is expired","extensions":{"code":"ErrorInvalidRequest"}}],"data":null}

```

The refresh token should be used to re-authenticate the client after the TTL has expired.

---

<div class="post-metadata">

**Author:** ![diggy](https://yyz1.discourse-cdn.com/flex007/user_avatar/discuss.dgraph.io/diggy/32/3666_2.png) [@diggy](https://discuss.dgraph.io/u/diggy)\
**Post date:** [September 30, 2019, 6:31pm UTC](https://discuss.dgraph.io/t/unauthenticated-desc-unable-to-parse-jwt-token-token-is-expired/8010/2 "2019-09-30T18:31:23Z")

</div>

[danielmai](https://github.com/danielmai) _commented_ :

Another way to reproduce this:

1. Log in
2. Periodically click on Refresh Schema in the Schema tab the TTL expires.

---

<div class="post-metadata">

**Author:** ![diggy](https://yyz1.discourse-cdn.com/flex007/user_avatar/discuss.dgraph.io/diggy/32/3666_2.png) [@diggy](https://discuss.dgraph.io/u/diggy)\
**Post date:** [July 11, 2020, 3:20am UTC](https://discuss.dgraph.io/t/unauthenticated-desc-unable-to-parse-jwt-token-token-is-expired/8010/3 "2020-07-11T03:20:03Z")

</div>