Interpreting error responses

When interpreting error responses it is important to understand that the behaviour of "400 Bad Request" and "403 Forbidden" is as follows:

  • 403 Forbidden
    • This response indicates that the requested action was not permitted. E.g. the account was locked, a required role was missing, etc.
    • If such a response is returned, the credentials supplied were ignored.
  • 400 Bad Request
    • This response indicates that the parameters supplied were processed
    • The processing result was negative. E.g. the credentials were invalid, the step called was unexpected, etc.