Set the correct status code in case of an invalid 2factor code. (#26)

Author: gjong

core/src/main/java/com/jongsoft/finance/core/exception/StatusException.java

@@ -34,6 +34,10 @@ public static StatusException notAuthorized(String message) {
         return new StatusException(401, message, null);
     }
 
+    public static StatusException forbidden(String message) {
+        return new StatusException(403, message, null);
+    }
+
     public static StatusException internalError(String message) {
         return new StatusException(500, message, null);
     }

fintrack-api/src/main/java/com/jongsoft/finance/rest/security/MultiFactorResource.java

@@ -46,7 +46,7 @@ public MultiFactorResource(
     public HttpResponse<?> validateToken(@Valid @Body MultiFactorRequest verification, HttpRequest<?> request) {
         var user = currentUserProvider.currentUser();
         if (!TwoFactorHelper.verifySecurityCode(user.getSecret(), verification.verificationCode())) {
-            throw StatusException.notAuthorized("Invalid verification code");
+            throw StatusException.forbidden("Invalid verification code");
         }
 
         var authentication = Authentication.build(