source-academy / backend / faab2f46b812bd90dca055bce6dba6e55f945967-PR-1370

88%

master: 87%

Pull #1370

github

Return 403 instead of 401 when course creation is restricted

401 would incorrectly trigger the frontend token-refresh flow, and 403
matches the sibling too-many-courses branch and the router's authz
rejections. Uses the generic opaque "Forbidden" body.

16 of 16 new or added lines in 2 files covered. (100.0%)

4015 of 4585 relevant lines covered (87.57%)

6986.22 hits per line