Comment by Kwpolska
5 months ago
403/404 seems to be the response to GET, not POST. In which case 405 Method Not Allowed would be better.
5 months ago
403/404 seems to be the response to GET, not POST. In which case 405 Method Not Allowed would be better.
And 405 response must include `Allow: POST` header.
Oh, I misread. Indeed, 4xx makes sense for a GET.