Request with invalid token_auth responds 200 OK #18055
Description
When sending requests against the API module with a non existing token, the HTTP response should be 403. Not 200.
Expected Behavior
When sending a request with a non existing token, response code should be 403
Current Behavior
Response code is 200
Steps to Reproduce (for Bugs)
curl -ik 'https://matomo.example.com/index.php?module=API&method=API.getMatomoVersion&token_auth=I_DONT_EXIST'
Your Environment
- Matomo Version: 4.4.1
- PHP Version: PHP 7.4.3
- Server Operating System: Ubuntu 20.04.03