When a request is not authorized, the server throw a simple error : https://github.com/holidayextras/jsonapi-client/blob/master/lib/Transport.js#L55 It should be sending the usual error.