# NousResearch/hermes-agent · Invalid tokens incorrectly returning 503 instead of 401

## Open now

- 0 issues, 2 PRs open on GitHub.
- PR #97415: fix(dashboard-auth): unparseable foreign tokens are 401s, not 503s
- PR #97426: fix(auth): return None for unrecognized tokens instead of 503 ProviderError

A bug where unrecognized or foreign session tokens trigger a 503 provider-unreachable error rather than an appropriate 401/None response, preventing clients from recovering. Multiple fixes address returning None or 401 for unparseable tokens.

## TL;DR

- 4 member(s): 0 open issue(s), 1 closed issue(s), 2 open PR(s), 0 merged PR(s), 1 PR(s) closed without merging.
- No fix has been merged to main; one or more PRs were attempted (see below).
- **Recommended:** review the prior/competing PR(s) below. A fix was attempted but not merged; your case may extend or revive that work.

## Maintainer resolution verdict

- Internal-tracker verdict over this cluster's issue members: `unresolved`. This is distinct from the fix status above. Weigh it yourself.

## How this cluster was grouped

- Link evidence (`STRUCTURAL_SPANNING`): every member is connected by structural evidence: shared changed files, or a closing/superseded reference.
- Pairwise link density `0.50`: the share of member pairs that carry a link, counting a structural link in full and a relevance-only link at 0.36. `1.00` means every pair is linked.

## Closed / duplicate issues

- #97361: \[Bug\]: a foreign or stale session token is reported as an unreachable IDP (503), so clients can never recover

## Prior & competing PRs

- **#97362: fix(dashboard-auth): treat an unrecognised token as None, not as an unreachable IDP**. closed without merge
  - maintainer direction: category `superseded_by_pr`; implication `superseded`; refs `#92828`, `#1`, `#97361`
- **#97415: fix(dashboard-auth): unparseable foreign tokens are 401s, not 503s**. open
  - maintainer direction: category `silent_close`; implication `active`
  - files: `plugins/dashboard_auth/nous/__init__.py`, `plugins/dashboard_auth/self_hosted/__init__.py`, `tests/plugins/dashboard_auth/test_nous_provider.py`, `tests/plugins/dashboard_auth/test_self_hosted_provider.py`
- **#97426: fix(auth): return None for unrecognized tokens instead of 503 ProviderError**. open
  - maintainer direction: category `duplicate_of`; implication `duplicate`; refs `#92828`
  - files: `plugins/dashboard_auth/nous/__init__.py`, `plugins/dashboard_auth/self_hosted/__init__.py`

## Fix status

- No merged fix on record.
- Subsystem: `dashboard`