| Response code | Description |
|---|
| Everything worked as expected. Generic, happy response code, if none of the other 2XX are better suited |
| Returned if we create a new resource |
| Acknowledgement of the request but will be processed asynchronously (so the handling could still fail) |
| A successful request with no body - maybe used in the case of deleting a resource |
| Response code | Description |
|---|
| Generic client error, if none of the below are more suitable |
| Literally missing auth token, or token is expired or revoked |
| Insufficient roles - typical if a user doesn't have permission to perform a requested action |
| The entity doesn't exist, for all intensive purposes (or the authenticated user has no access to it) |
- *405** Method Not Allowed
| Incorrect or unsupported HTTP method used for an endpoint |
- *422** Unprocessable Entity
| Request validation error. More details should be provided in the body |
5XX Server error - hopefully these are rare!
