403 Forbidden vs 401 Unauthorized HTTP responses
Jul 21, 2010 · In summary, a 401 Unauthorized response should be used for missing or bad authentication, and a 403 Forbidden response should be used afterwards, when the user is authenticated but isn’t authorized to p...