Public link ends with 401 error

bugs
1

When accessing an HTML page through the public API endpoint, the request returns HTTP 401 Unauthorized instead of the expected HTML content.

The endpoint should be publicly accessible based on the current configuration in appsettings.json:

"UserApiOptions": {
  "RestrictedRoutes": ["/api/private"],
  "PublicRoutes": [
     "/api/public", 
     "/invite"
   ]
}

Request URL example:

https://localhost/api/public/{id}/{guid}/data

Observed behavior:

Browser returns HTTP 401 Unauthorized

Expected behavior:

Requests under /api/public should be accessible without authentication

2

What is the Roles attribute on your API endpoint definition? Is it *?

3

Yes, the Roles setting is *. The API worked well on server version 2025.10.