Skip to content

Conversation

@rhuanbarreto
Copy link

@github-actions
Copy link
Contributor

@github-actions
Copy link
Contributor

@tiangolo
Copy link
Member

Thanks @rhuanbarreto, but with a 401:

MUST send a WWW-Authenticate header field

And as it's not clear which WWW-Authenticate header field should be used, not providing it is actually invalid, and although 403 is not the best error code, it's a valid option. So, for now, I'll leave it as is.

Later I'll do some more research to see if there's a simple way to provide the correct WWW-Authenticate values and then allow using 401.

But thanks for the interest! ☕

@tiangolo tiangolo closed this Jan 22, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

Projects

None yet

Development

Successfully merging this pull request may close these issues.

4 participants