Handling Unauthorized Requests

A standard error returned from a server is 401 Unauthorized. This usually happens when users try to access a part of the system they don’t have permission to access or when their credentials have expired. We can easily extend our API middleware to automatically catch authorization errors and cause a generic reaction. The simplest approach in these cases is to log the users out and ask them to re-authenticate to gain access to a previously inaccessible area of the application.