fix(api)!: return 403 for authorization failures, reserve 401 for missing session - #41590

Draft

ggazzo wants to merge 2 commits into

chore/api-401-403-semantics

Commits on Jul 27, 2026

fix(api): reserve HTTP 401 for unauthenticated requests
ggazzo
committed
fb912af
fix(api)!: return 403 for authorization failures, 401 only for no session
ggazzo
committed
f5280a2