Junior REST API What is the difference between a 401 and 403 status code? 401 Unauthorized → Authentication required (client not logged in / invalid token).403 Forbidden → Authentication is valid, but the user lacks permissions.