Why does AuthenticationFailed in authenticate() still return 403 Forbidden status code?

[enginecan]

Hi I have the following piece of code with TokenAuthentication.

class SignInModelBackend(ModelBackend):
    def authenticate(self, request, username=None, password=None, **kwargs):
        if "@" in username:
            kwargs = {"email": username}
        else:
            kwargs = {"username": username}
        try:
            user = UserModel.objects.get(**kwargs)
            if user.check_password(password):
                return user

            return None
        except UserModel.DoesNotExist:
            raise AuthenticationFailed(
                detail="Provided email address or username doesn't match any account.",
            )

I'm trying to understand why my AuthenticationFailed still returns a 403 Forbidden status code while AuthenticationFailed is defined as follows:

class AuthenticationFailed(APIException):
    status_code = status.HTTP_401_UNAUTHORIZED
    default_detail = _('Incorrect authentication credentials.')
    default_code = 'authentication_failed'

[nguyenbathanh]

@enginecan have you found the answer?