--- a/mod_http_oauth2/mod_http_oauth2.lua	Sat Apr 08 19:51:24 2023 +0200
+++ b/mod_http_oauth2/mod_http_oauth2.lua	Mon Apr 10 10:44:23 2023 +0200
@@ -750,7 +750,7 @@
 	local request = event.request;
 	local credentials = get_request_credentials(request);
 	if not credentials or not credentials.bearer_token then
-		return 400;
+		return 401;
 	end
 	local token_info = tokens.get_token_info(credentials.bearer_token);
 	if not token_info then