[wp-gsoc] [Summer of Code] #338: HTTP Status 405 on disabled should be 403

Summer of Code noreply at wordpress.org
Mon Aug 5 19:27:47 UTC 2013


#338: HTTP Status 405 on disabled should be 403
---------------------------+------------------
 Reporter:  MikeSchinkel   |       Owner:
     Type:  defect         |      Status:  new
 Priority:  normal         |   Milestone:
Component:  JSON REST API  |  Resolution:
 Keywords:                 |
---------------------------+------------------

Comment (by bpetty):

 Except that a 403 also indicates that, should the browser provide
 appropriate authentication credentials, it *would* be successful, but
 that's not true either. Reserving 403 strictly for auth credential issues
 (as that's what it will mostly be used for) even if it means using 404 or
 410 here would be more likely to avoid poorly implemented clients from
 prompting users for authentication that will never work because it's
 disabled entirely.

 So I can see arguments on both sides honestly.

--
Ticket URL: <https://gsoc.trac.wordpress.org/ticket/338#comment:3>
Summer of Code <https://gsoc.trac.wordpress.org>
My example project


More information about the wp-gsoc mailing list