- Which codes are explained?
- All standard ones from RFC 7231 and follow-ups. Common ones first (200, 201, 204, 301, 302, 400, 401, 403, 404, 500, 502, 503), with obscure ones in full list.
- When should I use 401 vs 403?
- 401 Unauthorized: 'I don't know who you are, authenticate.' 403 Forbidden: 'I know who you are, but you can't have this.' Commonly confused.
- What's 418 I'm a teapot?
- Joke code from RFC 2324 (HTCPCP). Some APIs use it for 'request rejected for non-serious reasons' but semantically it means nothing. Avoid in real APIs.
- When to use 3xx redirects?
- 301 permanent (SEO-transferring), 302 temporary, 303 see-other (POST-redirect-GET pattern), 307/308 preserve method. 301 for SEO moves; 302 for login redirects.