403 Forbidden
We know who you are, and the answer is no. Authenticating harder will not help.
403Client error
- What it means
- We know who you are, and the answer is no. Authenticating harder will not help.
- In practice
- 403 is a decision, not a confusion: the server identified you and refuses anyway. Retrying with the same account cannot succeed — the fix is permissions (a role, a plan, an allowlist), not credentials. Servers sometimes return 404 instead of 403 on purpose, so that outsiders cannot even learn the resource exists.
- Whose problem is it?
- The request. Retrying it unchanged will get the same answer.
Often confused with