All cheat sheets

Web

HTTP status codes cheat sheet

HTTP response status codes grouped by class, with the practical distinctions that matter when designing an API: 401 vs 403, 302 vs 307, and when to use 422.

2xx Success

3xx Redirect

4xx Client

5xx Server

Things worth remembering

  • 401 means not authenticated, 403 means authenticated but not allowed.
  • 301 and 302 historically let clients switch POST to GET. Use 308 and 307 to preserve the method.
  • 429 should always come with a Retry-After header so clients back off correctly.

More Web sheets