HTTP 403 Forbidden Status Code - Test & Mock API

Code Examples

Here are examples of how to test HTTP 403 responses in different programming languages:

Select options below to see how to use advanced features in your code:

Add Custom Delay (x-delay) - Test timeout scenarios (1-60000ms)

Add Custom Headers (x-response) - Add custom HTTP headers to response

Add Custom Payload (x-payload) - Control entire response body with JSON

Request:

curl https://free.mockerapi.com/403

Response Headers:

HTTP/1.1 403 Forbidden
Content-Type: application/json
Access-Control-Allow-Origin: *

Response Body:

{
  "success": false,
  "status": 403,
  "statusText": "Forbidden - The client does not have access rights to the content",
  "timestamp": "2025-10-08T10:30:45.123Z",
  "request": {
    "method": "GET",
    "url": "/403",
    "fullUrl": "https://free.mockerapi.com/403"
  }
}

Request:

fetch('https://free.mockerapi.com/403')
  .then(response => {
    console.log('Status:', response.status); // 403
    return response.json();
  })
  .then(data => {
    console.log('Response:', data);
  })
  .catch(error => {
    console.error('Error:', error);
  });

Response Headers:

HTTP/1.1 403 Forbidden
Content-Type: application/json
Access-Control-Allow-Origin: *

Response Body:

{
  "success": false,
  "status": 403,
  "statusText": "Forbidden - The client does not have access rights to the content",
  "timestamp": "2025-10-08T10:30:45.123Z",
  "request": {
    "method": "GET",
    "url": "/403",
    "fullUrl": "https://free.mockerapi.com/403"
  }
}

Request:

import requests

response = requests.get('https://free.mockerapi.com/403')

print(f'Status Code: {response.status_code}')  # 403
print(f'Response: {response.json()}')

Response Headers:

HTTP/1.1 403 Forbidden
Content-Type: application/json
Access-Control-Allow-Origin: *

Response Body:

{
  "success": false,
  "status": 403,
  "statusText": "Forbidden - The client does not have access rights to the content",
  "timestamp": "2025-10-08T10:30:45.123Z",
  "request": {
    "method": "GET",
    "url": "/403",
    "fullUrl": "https://free.mockerapi.com/403"
  }
}

Request:

Response Headers:

HTTP/1.1 403 Forbidden
Content-Type: application/json
Access-Control-Allow-Origin: *

Response Body:

{
  "success": false,
  "status": 403,
  "statusText": "Forbidden - The client does not have access rights to the content",
  "timestamp": "2025-10-08T10:30:45.123Z",
  "request": {
    "method": "GET",
    "url": "/403",
    "fullUrl": "https://free.mockerapi.com/403"
  }
}

Request:

require 'net/http'
require 'json'

uri = URI('https://free.mockerapi.com/403')
response = Net::HTTP.get_response(uri)

puts "Status Code: #{response.code}"  # 403
puts "Response: #{JSON.parse(response.body)}"

Response Headers:

HTTP/1.1 403 Forbidden
Content-Type: application/json
Access-Control-Allow-Origin: *

Response Body:

{
  "success": false,
  "status": 403,
  "statusText": "Forbidden - The client does not have access rights to the content",
  "timestamp": "2025-10-08T10:30:45.123Z",
  "request": {
    "method": "GET",
    "url": "/403",
    "fullUrl": "https://free.mockerapi.com/403"
  }
}

Request:

package main

import (
    "fmt"
    "io"
    "net/http"
)

func main() {
    resp, err := http.Get("https://free.mockerapi.com/403")
    if err != nil {
        panic(err)
    }
    defer resp.Body.Close()

    fmt.Printf("Status Code: %d\n", resp.StatusCode)  // 403

    body, err := io.ReadAll(resp.Body)
    if err != nil {
        panic(err)
    }

    fmt.Printf("Response: %s\n", body)
}

Response Headers:

HTTP/1.1 403 Forbidden
Content-Type: application/json
Access-Control-Allow-Origin: *

Response Body:

{
  "success": false,
  "status": 403,
  "statusText": "Forbidden - The client does not have access rights to the content",
  "timestamp": "2025-10-08T10:30:45.123Z",
  "request": {
    "method": "GET",
    "url": "/403",
    "fullUrl": "https://free.mockerapi.com/403"
  }
}

Request:

import java.net.http.*;
import java.net.URI;

public class HttpStatusTest {
    public static void main(String[] args) throws Exception {
        HttpClient client = HttpClient.newHttpClient();
        HttpRequest request = HttpRequest.newBuilder()
            .uri(URI.create("https://free.mockerapi.com/403"))
            .GET()
            .build();

        HttpResponse response = client.send(request,
            HttpResponse.BodyHandlers.ofString());

        System.out.println("Status Code: " + response.statusCode());  // 403
        System.out.println("Response: " + response.body());
    }
}

Response Headers:

HTTP/1.1 403 Forbidden
Content-Type: application/json
Access-Control-Allow-Origin: *

Response Body:

{
  "success": false,
  "status": 403,
  "statusText": "Forbidden - The client does not have access rights to the content",
  "timestamp": "2025-10-08T10:30:45.123Z",
  "request": {
    "method": "GET",
    "url": "/403",
    "fullUrl": "https://free.mockerapi.com/403"
  }
}

Request:

const https = require('https');

https.get('https://free.mockerapi.com/403', (res) => {
  console.log('Status Code:', res.statusCode);  // 403

  let data = '';

  res.on('data', (chunk) => {
    data += chunk;
  });

  res.on('end', () => {
    console.log('Response:', JSON.parse(data));
  });
}).on('error', (err) => {
  console.error('Error:', err.message);
});

Response Headers:

HTTP/1.1 403 Forbidden
Content-Type: application/json
Access-Control-Allow-Origin: *

Response Body:

{
  "success": false,
  "status": 403,
  "statusText": "Forbidden - The client does not have access rights to the content",
  "timestamp": "2025-10-08T10:30:45.123Z",
  "request": {
    "method": "GET",
    "url": "/403",
    "fullUrl": "https://free.mockerapi.com/403"
  }
}

What is HTTP 403 Forbidden?

HTTP 403 Forbidden indicates that the server cannot or will not process the request due to something that is perceived to be a client error. This could be malformed request syntax, invalid request message framing, or deceptive request routing.

The client should not repeat the request without modifications.

When Does This Happen?

A 403 Forbidden response is returned when:

The request has invalid syntax or malformed request parameters
Required parameters are missing from the request
The request body contains invalid JSON or XML
Query parameters have invalid values or formats
The request URL is malformed or contains invalid characters
Request headers contain invalid or conflicting values

Try It Live

Click the button below to make a live request and see the 403 Forbidden response

Common Use Cases

🔍 Input Validation Testing

Test how your application handles invalid input data and displays appropriate error messages to users.

🛡️ Error Handling

Ensure your application properly catches and handles bad request errors without crashing.

📝 Form Validation

Test form validation logic and ensure users receive clear feedback about invalid submissions.

🔄 API Testing

Verify that your API correctly validates request parameters and returns appropriate error responses.

Forbidden

Code Examples

What is HTTP 403 Forbidden?

When Does This Happen?

Try It Live

Common Use Cases

🔍 Input Validation Testing

🛡️ Error Handling

📝 Form Validation

🔄 API Testing

🎨 UI/UX Development

📚 Documentation

Related Client Error Status Codes