I was a bit surprised to see that all errors are returning a 500 (internal server error).
Example: incorrect password, returns a 500, with error code 196 in the response.
I would expect to receive a 401 (Unauthorized) in that situation,
In my opinion all errors made by the sender of an API call should result in a 4xx http code.
When something is wrong internally (most likely a bug in the server), then I expect a 500.
HTTP Status Codes:
4xx means: the API client has to fix the API request
500 means: the API server developer has to fix a bug
I was a bit surprised to see that all errors are returning a 500 (internal server error).
Example: incorrect password, returns a 500, with error code 196 in the response.
I would expect to receive a 401 (Unauthorized) in that situation,
In my opinion all errors made by the sender of an API call should result in a 4xx http code.
When something is wrong internally (most likely a bug in the server), then I expect a 500.
HTTP Status Codes:
4xx means: the API client has to fix the API request
500 means: the API server developer has to fix a bug