chore: resolve comments

internal/api/anonymous.go

@@ -25,8 +25,6 @@ func (a *API) SignupAnonymously(w http.ResponseWriter, r *http.Request) error {
  params.Aud = aud
  params.Provider = "anonymous"
 
- // always call this outside of a database transaction as this method
- // can be computationally hard and block due to password hashing
  newUser, err := params.ToUserModel(false /* <- isSSOUser */)
  if err != nil {
  return err

internal/api/api.go

@@ -155,7 +155,7 @@ func NewAPIWithVersion(ctx context.Context, globalConfig *conf.GlobalConfigurati
  }
  if params.Email == "" && params.Phone == "" {
  if !api.config.External.AnonymousUsers.Enabled {
- return badRequestError("Anonymous sign-ins are disabled")
+ return unprocessableEntityError("Anonymous sign-ins are disabled")
  }
  if _, err := api.limitHandler(limiter)(w, r); err != nil {
  return err

internal/api/auth.go

@@ -39,7 +39,7 @@ func (a *API) requireNotAnonymous(w http.ResponseWriter, r *http.Request) (conte
  ctx := r.Context()
  claims := getClaims(ctx)
  if claims.IsAnonymous {
- return nil, unauthorizedError("Anonymous user not allowed")
+ return nil, forbiddenError("Anonymous user not allowed to perform these actions")
  }
  return ctx, nil
 }