Azure / Azure/data-api-builder
Verify if Engine returns 4xx status code properly, or just 200 with sub status code instead
Open
cosmos
enhancement
- Dominant language
- C#
- Stars
- 1.5k
- Forks
- 370
- Avg merge
- 3d 17h
- Merged PRs (30d)
- 8
Description
In the case of missing "X-MS-CLIENT-PRINCIPAL" or query entity requires role more than anonymous, it's currently returning hot chocolate error, which is 500 with Error Code AUTH_NOT_AUTHENTICATED, it should return 403 instead.
Below are the current status code the Engine is returning after testing.

Contributor guide
Assessment
This issue has not been assessed yet.