API Testing · Junior · Question 74 of 75

What should happen when a request uses an expired token?

1500, because the token can't be read any more
2200 with data, since the user was valid before
3401 with a clear error, and no data returned

Show the answer

Correct answer: 401 with a clear error, and no data returned

Explanation

Testers check expired, malformed, revoked and missing tokens. Each should be rejected without leaking data.

Further reading

Test yourself

Take the API Testing · Junior quiz: questions and options are shuffled, and you get a review of your mistakes at the end.