Public link ends with 401 error

bugs
1

When accessing an HTML page through the public API endpoint, the request returns HTTP 401 Unauthorized instead of the expected HTML content.

The endpoint should be publicly accessible based on the current configuration in appsettings.json:

"UserApiOptions": {
  "RestrictedRoutes": ["/api/private"],
  "PublicRoutes": [
     "/api/public", 
     "/invite"
   ]
}

Request URL example:

https://localhost/api/public/{id}/{guid}/data

Observed behavior:

Browser returns HTTP 401 Unauthorized

Expected behavior:

Requests under /api/public should be accessible without authentication

2

What is the Roles attribute on your API endpoint definition? Is it *?

3

Yes, the Roles setting is *. The API worked well on server version 2025.10.

5

After additional testing, it seems that the issue lies in an application run from a docker container. I have tested with the same project run as a docker container and in IIS. With docker, the request ended with 401, with IIS it was 200 and the data was correctly returned.

6

The issue was isolated to the Linux Docker and all APIs return 401 (both public and private after login). It doesn’t seem to be related to nginx, direct requests to Kestrel also return 401, logging on level DEBUG doesn’t return any data.