Rest API - HTTP Status Codes
A user has successfully logged into your REST API but attempts to access an admin-only endpoint. What HTTP status code should your API return?
A user has successfully logged into your REST API but attempts to access an admin-only endpoint. What HTTP status code should your API return?
easy📝 Conceptual Q2 of 15
Step-by-Step Solution
Solution:
Step 1: Identify user authentication status
The user is already logged in, so authentication is confirmed.Step 2: Check authorization for the resource
The user lacks permission to access the admin endpoint, indicating an authorization failure.Final Answer:
403 Forbidden -> Option BQuick Check:
User authenticated but not authorized [OK]
Quick Trick: Logged in but no permission? Return 403 Forbidden [OK]
Common Mistakes:
- Returning 401 Unauthorized when user is authenticated
- Using 404 Not Found to hide resource existence
- Confusing 400 Bad Request with authorization errors
Master "HTTP Status Codes" in Rest API
Want More Practice?
15+ quiz questions · All difficulty levels · Free
Free Signup - Practice All QuestionsMore Rest API Quizzes