I’m currently working on an HTTP based API. Our terms of use require the user to send an appropriate user-agent header (e.g. “-” is considered invalid). Now I’m not quite sure which would be the correct HTTP status the server should be responding with, if the request is rejected. Any suggestions?
Share
400 Bad Request or 403 Forbidden would be the two I’d pick