Skip to main content
Version: 1.x

API02003: Token Invalid

What This Means​

The authentication token being used is not recognized by the server. This is different from an expired token — this token was never valid or has been revoked.

Common Causes​

  • Token revoked — An administrator revoked the session
  • Token corrupted — Data corruption during storage or transmission
  • Server reset — Server secret keys changed, invalidating all tokens
  • Wrong server — Token from a different WordPress installation

Server Error Mapping​

This error code is triggered when the server returns:

Server CodeSource
jwt_auth_invalid_tokenJWT Authentication plugin

How to Fix​

1. Log In Again​

Clear your session and authenticate fresh. If this device may hold sales that haven't reached your store, do the check in step 2's warning first:

  1. Log out completely
  2. Close and reopen the POS
  3. Log in with your credentials

2. Clear Application Data​

Check for unsaved work first

Clearing local data or reinstalling the app deletes anything on this device that hasn't reached your store — including sales taken while offline, open carts, and edits that didn't save. Before you clear anything, open Store health → Database and check nothing is listed as held or as never having reached your server, then Store health → Logs for 0 stuck records and 0 changes waiting to send; then finish or note every open cart. If your WCPOS has no Store health page, update WCPOS first, then check. If anything is listed or waiting, or you can't check, don't clear — ask your store owner or contact support.

Only if logging out doesn't work, and only after the check above:

  • Clear the POS app cache/data
  • On web: Clear browser cookies and local storage for the site
  • On desktop: Check app settings for a "Clear Data" option

3. Check Server Configuration​

If the issue affects all users:

  • Check if WordPress salts were changed
  • Verify JWT or authentication plugin settings
  • Review recent server changes

4. Verify You're on the Correct Server​

Ensure the POS is configured to connect to the right WordPress site, especially if you have multiple installations.