HTTP 403 Forbidden — What It Means

HTTP 403 Forbidden — The server understood the request but refuses to authorize it.

Key points

• The client is identified but lacks permission to access the resource
• Unlike 401, re-authenticating won't help — the client simply doesn't have the right access
• Some APIs deliberately return 404 instead of 403 for private resources, to avoid revealing they exist