60 codes de statut
The server has received the request headers and the client should proceed to send the request body.
Cas d'usage : Large file uploads — client sends Expect: 100-continue before body.
The server agrees to switch protocols as requested by the client.
Cas d'usage : WebSocket upgrades: HTTP → WebSocket.
The server has received and is processing the request, but no response is yet available.
Cas d'usage : Long-running WebDAV operations to prevent client timeout.
Returns response headers before the final response, allowing the client to preload resources.
Cas d'usage : Preloading critical CSS/JS while the server prepares the full response.
The request has succeeded. The response body contains the requested resource.
Cas d'usage : Standard successful GET, POST, PUT, PATCH responses.
The request has been fulfilled and a new resource has been created.
Cas d'usage : Successful POST that creates a resource. Include Location header pointing to new resource.
The request has been accepted for processing but processing has not been completed.
Cas d'usage : Async operations: email sending, report generation, batch jobs.
The response is successful but the information was obtained from a third-party source.
Cas d'usage : Proxies or mirrors that transform the original response.
The server successfully processed the request but returns no content.
Cas d'usage : DELETE operations, form submissions with no redirect, successful PATCH with no body needed.
The server successfully processed the request and asks the client to reset the document view.
Cas d'usage : Forms — server wants the client to clear the form after submission.
The server is delivering only part of the resource due to a range header sent by the client.
Cas d'usage : Video streaming, resumable file downloads, pagination of large binary resources.
The response body contains status information for multiple independent operations.
Cas d'usage : WebDAV batch operations where each sub-request has its own status.
Members of a DAV binding have already been enumerated in a previous reply.
Cas d'usage : WebDAV — avoids re-listing resources already returned.
The server has fulfilled a GET for the resource and the response represents the result of one or more instance manipulations.
Cas d'usage : HTTP delta encoding — differential responses for caching efficiency.
The request has more than one possible response. The user should choose one.
Cas d'usage : Content negotiation — multiple formats or languages available.
The resource has been permanently moved to a new URL. Future requests should use the new URL.
Cas d'usage : Site migration, domain changes. Passes full SEO link equity to new URL.
The resource is temporarily at a different URL. Client should continue using original URL.
Cas d'usage : Temporary maintenance pages, A/B testing redirects.
The server directs the client to get the requested resource at another URI using a GET request.
Cas d'usage : Post/Redirect/Get pattern — after a successful POST, redirect to a confirmation page.
The resource has not been modified since the last request. Client should use its cached version.
Cas d'usage : Conditional GET with If-None-Match or If-Modified-Since. Saves bandwidth.
The resource is temporarily at a different URL. The method and body must not change.
Cas d'usage : Like 302, but guarantees the HTTP method is preserved on redirect.
The resource has permanently moved. The method and body must not change.
Cas d'usage : Like 301 but method-preserving. Good for migrating POST endpoints.
The server cannot process the request due to client error (malformed syntax, invalid parameters).
Cas d'usage : Invalid JSON body, missing required fields, invalid query params, validation failures.
The client must authenticate itself to get the requested response.
Cas d'usage : Missing or invalid Bearer token / API key. Should trigger a login prompt.
Reserved for future use; some APIs use it for subscription/paywall responses.
Cas d'usage : Paywalled API endpoints, exceeded free-tier limits, subscription required.
The client is authenticated but lacks permission to access the resource.
Cas d'usage : User is logged in but lacks the required role or ownership. Don't reveal resource existence.
The server cannot find the requested resource. The URL may be incorrect or the resource deleted.
Cas d'usage : Missing pages, deleted resources, invalid IDs. Most common HTTP error.
The HTTP method is not supported for the requested resource.
Cas d'usage : Calling DELETE on a read-only endpoint. Include Allow header listing valid methods.
The server cannot produce a response matching the Accept headers sent by the client.
Cas d'usage : Client requests application/xml but only JSON is available.
The client must authenticate itself with the proxy server.
Cas d'usage : Corporate proxy requiring credentials before passing requests through.
The server timed out waiting for the request.
Cas d'usage : Client took too long to send the complete request. Server closes the connection.
The request conflicts with the current state of the server.
Cas d'usage : Duplicate username registration, version conflicts in optimistic concurrency.
The resource is permanently deleted and will not be available again.
Cas d'usage : Deleted content where you want search engines to deindex permanently.
The server requires a Content-Length header in the request.
Cas d'usage : API endpoints that need to pre-allocate resources based on expected body size.
The server does not meet a precondition the client specified in its headers.
Cas d'usage : Optimistic concurrency with If-Match/ETags. Edit conflict detection.
The request body is larger than the server is willing to process.
Cas d'usage : File upload exceeds limit. Include Retry-After if temporary.
The URI provided was too long for the server to process.
Cas d'usage : Excessively long query strings, typically from GET requests with too much data.
The media format of the request body is not supported by the server.
Cas d'usage : Sending XML to an endpoint that only accepts JSON.
The range specified in the Range header cannot be fulfilled.
Cas d'usage : File download resumed beyond the file's actual size.
The expectation indicated in the Expect header cannot be met by the server.
Cas d'usage : Client sends Expect: 100-continue but server can't accommodate it.
The server refuses to brew coffee because it's a teapot (RFC 2324 April Fools' joke).
Cas d'usage : Easter egg in APIs. Some services use it to reject clearly bot-driven requests.
The request was well-formed but failed semantic validation.
Cas d'usage : JSON is valid but business logic validation fails (e.g., end date before start date).
The resource that is being accessed is locked.
Cas d'usage : WebDAV — file checked out by another user.
The request failed because it depended on another request that failed.
Cas d'usage : WebDAV batch operations where a prior step failed.
The server is unwilling to process a request that might be replayed.
Cas d'usage : TLS 0-RTT early data that could be a replay attack.
The client should switch to a different protocol.
Cas d'usage : Server requires HTTPS but received HTTP, or requires HTTP/2.
The server requires the request to be conditional to prevent lost updates.
Cas d'usage : API requires If-Match header for update operations to prevent conflicts.
The user has sent too many requests in a given amount of time (rate limiting).
Cas d'usage : API rate limits exceeded. Include Retry-After header with wait time.
The server is unwilling to process the request because its header fields are too large.
Cas d'usage : Excessively large cookies or too many custom headers.
The resource is unavailable due to legal reasons such as government censorship.
Cas d'usage : GDPR compliance blocking, DMCA takedowns, regional legal restrictions.
The server encountered an unexpected condition that prevented it from fulfilling the request.
Cas d'usage : Unhandled exceptions, database errors, configuration issues. Generic catch-all.
The server does not support the functionality required to fulfill the request.
Cas d'usage : HTTP method not recognized or not yet implemented by the server.
The server, while acting as a gateway, received an invalid response from the upstream server.
Cas d'usage : Upstream API timeout, crashed microservice behind load balancer.
The server is temporarily unable to handle the request due to overload or maintenance.
Cas d'usage : Planned maintenance, server overload. Include Retry-After header.
The server, acting as a gateway, did not receive a timely response from the upstream server.
Cas d'usage : Slow database queries, slow microservices causing proxy timeouts.
The HTTP protocol version used in the request is not supported by the server.
Cas d'usage : Rare — client uses an unsupported HTTP version.
The server has an internal configuration error with transparent content negotiation.
Cas d'usage : Circular reference in content negotiation configuration.
The server is unable to store the representation needed to complete the request.
Cas d'usage : WebDAV — disk full. Also used in some APIs for quota exhaustion.
The server detected an infinite loop while processing the request.
Cas d'usage : WebDAV — infinite loop in directory binding.
Further extensions to the request are required for the server to fulfill it.
Cas d'usage : HTTP Extension Framework — specific extension policy not met.
The client needs to authenticate to gain network access.
Cas d'usage : Captive portals — hotel/airport Wi-Fi login pages.
Les codes de statut HTTP sont des nombres à 3 chiffres renvoyés par un serveur Web en réponse à une requête client. Ils indiquent si une requête a réussi, été redirigée ou a rencontré une erreur. Le premier chiffre définit la classe de réponse : 1xx (informatif), 2xx (succès), 3xx (redirection), 4xx (erreur client), 5xx (erreur serveur).
301 (Moved Permanently) informe les navigateurs et les moteurs de recherche qu'une page a définitivement été déplacée vers une nouvelle URL, en transférant l'intégralité du lien SEO à la nouvelle URL. 302 (Found / Temporary Redirect) signale un déplacement temporaire ; les navigateurs redirigent mais les moteurs de recherche conservent généralement l'URL d'origine dans leur index.
401 Unauthorized signifie que le client n'est pas authentifié — aucune information d'identification fournie ou informations invalides. 403 Forbidden signifie que le client est authentifié mais n'est pas autorisé à accéder à la ressource. Utilisez 401 pour inviter à se connecter et 403 lorsque l'utilisateur est connecté mais n'a pas la permission.
Pour un POST réussi qui crée une ressource, retournez 201 Created avec un en-tête Location pointant vers la nouvelle ressource. Pour un POST réussi qui déclenche un traitement sans créer de ressource, retournez 200 OK. Pour les opérations asynchrones où le traitement n'est pas encore terminé, retournez 202 Accepted.