Rest API - HTTP Status Codes
Which HTTP status code should a REST API return when a user is logged in but tries to access a resource they don't have rights for?
Which HTTP status code should a REST API return when a user is logged in but tries to access a resource they don't have rights for?
easy📝 Syntax Q12 of 15
Step-by-Step Solution
Solution:
Step 1: Identify the meaning of 403 Forbidden
403 means the user is authenticated but does not have permission to access the resource.Step 2: Confirm 401 is for unauthenticated users
401 is for users who are not logged in or have invalid credentials, so it does not apply here.Final Answer:
403 Forbidden -> Option CQuick Check:
403 Forbidden = Logged in but no permission [OK]
Quick Trick: 403 means permission denied after login [OK]
Common Mistakes:
- Using 401 when user is logged in
- Confusing 403 with 404 Not Found
- Thinking 403 means server error
Master "HTTP Status Codes" in Rest API
Want More Practice?
15+ quiz questions · All difficulty levels · Free
Free Signup - Practice All QuestionsMore Rest API Quizzes