blog-2023-12-30-http-401-vs-403

http 401 Unauthorized: authentication - you're not logged in  
http 403 Forbidden: authorization - you're logged in but you don't have the rights

the naming's confusing. 

[source](https://www.permit.io/blog/401-vs-403-error-whats-the-difference)