Allow API with 401/403 Status Code to be Scanned

[azfar26]

What information was incorrect, unhelpful, or incomplete?

Hello MDN team,

With the previous Observatory (https://observatory.mozilla.org/), I can scan my API that returned 401 Unauthorized status code by default. Secure response headers are still returned by the API and Observatory gave a grade of A+.

With the new Observatory (https://developer.mozilla.org/en-US/observatory), sites that did not respond with a 2xx HTTP status code are not allowed to be scanned.

What did you expect to see?

I read the FAQ section here, although HTTP Observatory is designed for scanning website, it can be used for API endpoints as well.

I'm expecting my API to be allowed to scan, just like in the previous Observatory. To narrow down the non-2xx status code, you can allow only 401 Unauthorized and 403 Forbidden status codes - since these are the typical status codes returned by API with unauthorized access.

Do you have any supporting links, references, or citations?

No response

Do you have anything more you want to share?

[github-actions]

It looks like this is your first issue. Welcome! 👋 One of the project maintainers will be with you as soon as possible. We appreciate your patience. To safeguard the health of the project, please take a moment to read our code of conduct.

[argl]

Hi, could you check again? Some changes have been deployed recently.

[azfar26]

@argl I'm able to scan my API now. Thanks for the fix! 👍🏼