> HTTP 200 OK
> look inside
> actually 401 Unauthorized wrapped in JSON for some reason
@whitequark I actually got complaints from a colleague for returning HTTP errors instead of only reporting errors in JSON (of course the error response had a body with details). No, didn't change it it, they had to learn to live with it. ​