diff --git a/backend/app/security/jwt_bearer.py b/backend/app/security/jwt_bearer.py index c82a297..b2d7bd2 100644 --- a/backend/app/security/jwt_bearer.py +++ b/backend/app/security/jwt_bearer.py @@ -28,7 +28,7 @@ class JWTBearer(HTTPBearer): if credentials: if not credentials.scheme == "Bearer": raise HTTPException( - status_code=403, detail="authentication_scheme_invalid" + status_code=401, detail="authentication_scheme_invalid" ) try: token = await token_service.verify_access_token( @@ -36,7 +36,7 @@ class JWTBearer(HTTPBearer): ) if not token: raise HTTPException( - status_code=403, detail="token_invalid_or_expired" + status_code=401, detail="token_invalid_or_expired" ) return token except InsufficientPermissionsError: @@ -44,4 +44,4 @@ class JWTBearer(HTTPBearer): except InvalidTokenAudienceError: raise HTTPException(status_code=403, detail="invalid_token_audience") else: - raise HTTPException(status_code=403, detail="authorization_code_invalid") \ No newline at end of file + raise HTTPException(status_code=401, detail="authorization_code_invalid") \ No newline at end of file