4xx Client Error

HTTP 403 Forbidden

The server understood the request but refuses to authorize it. Unlike 401, authenticating again will not help — the client simply does not have permission to access this resource.

Common Causes

  • Insufficient permissions for the requested resource
  • IP address blocked or blacklisted
  • Directory listing disabled on the server
  • CORS policy blocking the request

How to Fix

  1. 1Verify your account has the required permissions or role
  2. 2Check server access control lists and firewall rules
  3. 3Contact the administrator to request access
  4. 4Review CORS configuration if it's a cross-origin issue

Example

HTTP 403 Forbidden
GET /admin/settings HTTP/1.1
Authorization: Bearer user-token

→ 403 Forbidden
→ "Admin role required"

Related Client Error Codes

400

Bad Request

401

Unauthorized

402

Payment Required

404

Not Found

405

Method Not Allowed

406

Not Acceptable

407

Proxy Authentication Required

408

Request Timeout

409

Conflict

410

Gone

411

Length Required

412

Precondition Failed

413

Content Too Large

414

URI Too Long

415

Unsupported Media Type

416

Range Not Satisfiable

417

Expectation Failed

418

I'm a Teapot

421

Misdirected Request

422

Unprocessable Content

423

Locked

424

Failed Dependency

425

Too Early

426

Upgrade Required

428

Precondition Required

429

Too Many Requests

431

Request Header Fields Too Large

451

Unavailable For Legal Reasons