API key validators return wrong status code

RevolutionUC / revolutionuc-website

(legacy) Development repository for RevolutionUC website

MIT License

3 stars 4 forks source link

Closed domfarolino closed 6 years ago

domfarolino commented 6 years ago

Given https://www.w3.org/Protocols/rfc2616/rfc2616-sec10.html we should absolutely be returning a 401 and not a 403. This is pretty explicit.