blog-2023-12-30-http-401-vs-403

http 401 Unauthorized: authentication - you're not logged in
http 403 Forbidden: authorization - you're logged in but you don't have the rights

the naming's confusing.

source