This is a common error in WooCommerce when you try connecting it to Pricefy using APIs. These are a few possible causes:

  • your store’s is using WooCommerce version 3.5 or earlier. Make sure you upgrade to the latest WooCommerce version before installing our plugin.
  • no valid HTTPS/SSL certificate. Make sure you install and activate one so our app can communicate with the WooCommerce API.
  • For the plugin to work WordPress needs to be installed at domain or subdomain level, not at page level. For example, say you’re developing a store for a client and you’re creating a mockup on www.example.com/devstore/. Our server will try to connect to the WooCommerce API at subdomain level, on www.example.com but the store is on www.example.com/devstore/. As an alternative, you can install the development store on the devstore.example.com subdomain, that will work.
  • Your website is password protected, or you’re using a “coming soon” or “site under construction” plugin that’s disabling public access to your store. This also disables API access and our app needs it to work.
  • You have a caching plugin on your store that strips the “Authorization” header. Try disabling your plugins one by one to find the one that’s causing the issue.

If you’ve tried all the above, your server is stripping the “Authorization” header.

Important: As this pertains to configuration of your webserver and/or other WordPress plugins, Pricefy cannot provide support in these cases.

In some cases, doing the following might help (some may not apply to you):

  • Review the configuration of your caching plugin and look for settings that pertain to caching or not caching headers
  • Generate a new, valid LetsEncrypt certificate for your subdomain on server level
  • Remove the Cloudflare CDN Proxy from the Subdomain (i.e. having it point directly to the IP)
  • Switch the WooCommerce Theme to “Storefront” just for the connection
  • Adding the following to your .htaccess file:

SetEnvIf Authorization "(.*)" HTTP_AUTHORIZATION=$1

If nothing above works, better contact your hosting provider.