why does token verification return 403 and not 401? And why is it that if the token is not in the request header, 401 is returned instead of 403?
why does token verification return 403 and not 401? And why is it that if the token is not in the request header, 401 is returned instead of 403?