Repository navigation
Arrowhead violates RFC on status code 401 Unauthorized #215
Description
https://tools.ietf.org/html/rfc2616#section-10.4.2
10.4.2 401 Unauthorized
The request requires user authentication. The response MUST include a
WWW-Authenticate header field (section 14.47) containing a challenge
applicable to the requested resource. The client MAY repeat the
request with a suitable Authorization header field (section 14.8). [...]
I stumbles open this while tinkering with the successor of RestTemplate, the WebClient.
Maybe we should return 403 Forbidden instead of 401 Unauthorized?
Activity