Glossary: Web App Security and Authentication

HTTP status codes

Also written: 201 Created, 303 See Other, 400 Bad Request, 401 Unauthorized, 403 Forbidden, 404 Not Found, 409 Conflict, 415 Unsupported Media Type, 429 Too Many Requests, 500, 201, 303, 400, 401, 403, 404, 409, 415, 429

Three-digit codes in an HTTP reply that say what happened. In kc-shop: 201 Created (new order made), 303 See Other (load another address with a GET, used after a form post), 400 (input broke the schema or a sign-in callback failed), 401 (not signed in), 403 (known user but not allowed, or a missing CSRF token), 404 (not found, or not yours), 409 Conflict (valid request, wrong state), 415 (unsupported body type, such as a form post without formbody), 429 (rate limit hit) and 500 (unexpected error, with no details shown).