4xx Client Error
401Unauthorized
The request lacks valid authentication credentials. Despite its name it concerns authentication, not authorization, and is typically accompanied by a WWW-Authenticate header.
Security relevance
Distinguish 401 (not authenticated) from 403 (authenticated but not permitted); confusing them can leak or mask access-control flaws.