I was wondering what HTTP status code to use when returning errors for non-xhr requests, so I consulted with company members and received this response:

Strictly speaking, it would be a header syntax error, so wouldn't it be 400?

I think I’ll return 400 when only xhr is allowed and requests come from anything else.

---

Reference Information

・[Studying HTTP] HTTP Status Code

That’s all from the Gemba.