Example of failed request

When request done by user who is not a member of middleware whitelist.

Request:

curl --location --request GET 'https://demo.ddev.site/api/demo/photos/1?user=55' \
    --header 'Content-Type: application/json' \
    --header 'Accept: application/json' \
    --header 'Cookie: fe_typo_user=53574eb0bafe1c0a4d8a2cfc0cf726dd \
    --header 'X-CSRF-TOKEN: 53574eb0bafe1c0a4d8a2cfc0cf726dd'

Response:

{
    "error": "User is not a resource owner."
}

Warning

Error responses have code 403.