12
kevdev
8y

Found out the our api responds to unauthenticated requests with a 200 {detail: " unauthorized request"}.

#facepalm

Comments
  • 1
    would you prefer it to return {summary: "unauthorized request"} ?
  • 0
    It should be a big fat 403 error
Add Comment