All HTTP Status Codes
403
Forbidden
4xx Client Error
RFC 9110What it means
The server understood the request but refuses to authorize it. Unlike 401, re-authenticating won't help — the client doesn't have permission regardless of credentials.
Common causes
- Insufficient role or permissions
- IP address blocked
- CORS policy rejection
- API scope missing
- Resource is private
How to fix it
Check that the authenticated user has the required role or permission. If you're the server owner, review access control rules and CORS configuration.
Test this status code live
Send real HTTP requests and inspect status codes directly in your browser.