Fehlercodes · ksef · Polen

KSEF-21116Teilweise

KSeF authentication token is invalid

So lautet die Ablehnung wörtlich: „[KSEF-21116] KSeF error 21116 ("Nieprawidłowy token") is returned when the AuthorisationToken supplied to /online/Session/InitToken does not match a valid, active token issued for the target NIP context. Unlike 21170 (session expired) or 21302 (token inactive), 21116 means KSeF cannot recognise the token at all — wrong value, wrong environment, or wrong context.“

KSeF supports two authentication paths: signed challenge (qualified electronic signature or personal seal) and token-based (a token issued via /online/Credentials/GenerateToken). Tokens are context-bound: a token generated for NIP A cannot authenticate for NIP B, and a token generated in the test environment cannot authenticate against production. The AuthorisationToken is included in the signed InitToken payload as base64-encoded plaintext.

Was Sie bereithaltenDie korrekten Werte aus Ihrer Buchhaltung; wir zeigen Ihnen, welche Stelle betroffen ist.
Was wir tunVerify the token value character-for-character, confirm you are calling the correct environment (test vs production), and confirm the token was generated for the exact NIP context you are authenticating against.
So sieht der Befund ausBeispiel
BefundPrüfung nötig · KSEF-21116
Von IhnenDie korrekten Werte
DanachErneute Prüfung
NachweisSHA-256 und /verify-Link nach der Prüfung
Tritt oft zusammen auf
KSEF-21121KSeF rate limit reached for this endpointKSEF-21170KSeF interactive session has expiredKSEF-21301Missing authorization for this KSeF operation