Incorrect HTTP Status Code for Expired JWT

matchID-project / deces-backend

API Personnes décédées

https://deces.matchid.io/deces/api/v1/docs

GNU Lesser General Public License v3.0

9 stars 4 forks source link

Incorrect HTTP Status Code for Expired JWT #419

Open jbcam opened 3 months ago

jbcam commented 3 months ago

Hello, I wanted to report this issue regarding expired JWT handling. Currently, the API returns a 422 Unprocessable Entity status code when a JWT is expired. However, based on HTTP status code standards, returning a 401 Unauthorized status code in this scenario would be more appropriate.

Thanks for your help on that!