Requesting unauthorized user lists return empty list instead of 403 status code

[jonathanantoine]

Hello,

When requesting items of a liked user lists, I get a empty results while previously I did get a 403 error codes.
Is this the correct behavior ?

Called api : https://api.trakt.tv/users/arthur90/lists/32427606/items?extended=full&page=1&limit=250

[kevincador]

Assigning this to you @StefanFriptu 👀

Current behavior: when the list metadata lookup does not resolve because the user/list is not visible to the requester, userListItemsProcessor() returns an empty result. That bubbles up as 200 OK with [].

We should fix this. If the call fails because the target user or target list is private/inaccessible, the API should return 403 Forbidden instead of 200 [].

Expected behavior:

• Public/accessible list with no items: 200 []
• Private user or private/inaccessible list: 403 Forbidden

Thanks for the heads up @jonathanantoine