Page 1 of 1

Solutions for "Illegal Client" or "Signature Error" in App SDK

Posted: 2026年 Apr 10日 11:26
by taojing@tuya.com

Phenomenon:
The App SDK returns an error such as "Illegal Client" or "Signature Error" (error codes ILLEGAL_CLIENT_ID, SING_VALIDATE_FALED).

Cause of the Issue:
There is an inconsistency between the package name, AppKey, AppSecret, SHA256, and the configuration on the Tuya IoT platform.

Troubleshooting Steps:

1.Check the package name: Verify the configured package name on the Tuya IoT platform under App-App SDK-Optional Configuration, and compare it with the local project to ensure they match.

2.Check AppKey and AppSecret: On the Tuya IoT platform, locate the AppKey and AppSecret under App-App SDK-Your Application-Obtain Key, and ensure the local project is configured with the correct AppKey and AppSecret. Refer to the development documentation for configuration instructions:
iOS Development Docmentation
Android Development Docmentation.

3.For Android developments, check SHA256: Verify that the SHA256 has been uploaded on the Tuya IoT platform under App-App SDK-Your Application-Obtain Key-Android Signature Certificate-Add SHA256. Instructions for generating SHA256 can be found in the Documentation.