Hi @batifan, you must use your api key for guest session requests. The proper format for the request is:

https://api.themoviedb.org/3/guest_session/{guest_session_id}/rated/movies?api_key={api_key}

For the second error, it sounds like you might be putting your api key into the header field for the "Try It!" example. Try It only accepts "access token" and not "api key".

If this doesn't address your problem then come back here and we can look at some other things.

@robbie3999 said:

Hi @batifan, you must use your api key for guest session requests. The proper format for the request is:

https://api.themoviedb.org/3/guest_session/{guest_session_id}/rated/movies?api_key={api_key}

For the second error, it sounds like you might be putting your api key into the header field for the "Try It!" example. Try It only accepts "access token" and not "api key".

If this doesn't address your problem then come back here and we can look at some other things.

Thank you for your help. But what should I put into request header? My header looks like this:

{
      method: "GET",
      headers: {
        accept: "application/json",
        Authorization:
          "Bearer 12121212121211212121212",
      },
    };

"accept: application/json" is the only thing in the header. You don't need an authorization header because you are passing the api key in the url.

This describes the authentication methods. Note that you have -two- tokens, one is the api key and the other is the bearer token. Most of the time you can use either one. But if I remember correctly, the guest session calls -require- the api key only. If you try to use the bearer token you get your personal account information instead of the guest session information.

@robbie3999 said:

"accept: application/json" is the only thing in the header. You don't need an authorization header because you are passing the api key in the url.

This describes the authentication methods. Note that you have -two- tokens, one is the api key and the other is the bearer token. Most of the time you can use either one. But if I remember correctly, the guest session calls -require- the api key only. If you try to use the bearer token you get your personal account information instead of the guest session information.

Thank you so much. It helps me.