Should 403 and 401 redirect to login?

[CupOfGeo]

First Check

• I added a very descriptive title here.
• I used the GitHub search to find a similar question and didn't find it.
• I searched in the documentation/README.
• I already searched in Google "How to do X" and didn't find any information.
• I already read and followed all the tutorial in the docs/README and didn't find an answer.

Commit to Help

• I commit to help with one of those options 👆

Example Code

// Original code
const handleApiError = (error: Error) => {
  if (error instanceof ApiError && [401, 403].includes(error.status)) {
    localStorage.removeItem(\"access_token\")
    window.location.href = \"/login\"
  }
}

// Proposed solution
if (error instanceof ApiError && error.status === 401) {

Description

The frontend global error handler in `main.tsx` is treating both 401 and 403 HTTP status codes as authentication failures, redirecting users to the login page and clearing their access token.

full-stack-fastapi-template/frontend/src/main.tsx

Line 22 in e4022a9

if (error instanceof ApiError && [401, 403].includes(error.status)) {

When a 403 is forbidden not 401 Unauthorized. 403's are used in a few places like a superuser can not delete itself fair but that shouldn't bring you back to the login. I feel that this is too general of an exception to catch.

Would have to go through and change update a few more places that return 403 like when a non super user tries to access the admin page /admin it should either give them a 401 (and probably still shouldn't send them back to login) or just display an actual error message. Would need to look a little more into this for now in my current work I'm just disabling the login redirects on 403's.

Love to hear others thoughts.

Operating System

Linux

Operating System Details

linux dev container
"image": "mcr.microsoft.com/devcontainers/python:1-3.12-bullseye"

Python Version

3.12

Additional Context

Happy to make this an issue and work on it as I currently already am. Thanks you FastAPI team y'all rock.

• Geo