title: How to handle PUT or POST without required (OAuth) Authorization header in a Rest Service
body: <p>I have trouble finding an answer to how a rest resource should respond to a client when an (OAuth) authorization header is missing (or invalid). For a GET request a redirect could be used, but in case of a POST or PUT this is not desirable.</p>
  
  <p>What I would like to achieve is that a rest resource tells a client that it needs to get authorization. Preferably given the proper OAuth instructions (location of service, token type etc).</p>