spring-security-valid receive a 403 when data is valid but user doesn't have credentials spring-security-valid receive a 400 instead of 403 when data is invalid and user doesn't have credentials
