Using insufficient permissions to make API requests now throws an HTTP 403 error

Breaking changes

Using insufficient permissions to make API requests now throws an HTTP 403 error Breaking changes

What’s new

Returns the status code 403 when an API request is made with insufficient permission. Previously, the API returned a 401 status code.

Impact

The API now returns a 403 status code for insufficient permissions instead of 401, providing more accurate error information.

Upgrade

View your current API version in Workbench.
If you use an SDK, upgrade to the corresponding SDK version for this API version.

If you don’t use an SDK, update your API requests to include Stripe-Version: 2016-10-19

Upgrade the API version used for webhook endpoints .
Test your integration against the new version.
If you use Connect, test your Connect integration .
In Workbench, perform the upgrade . You can roll back the version for 72 hours.

Learn more about Stripe API upgrades.