SOAP API endpoints doesn't authenticate using Authorization header token

bugs
1

What version of Origam are you using: 2026.9.1

I was trying to call SOAP API enpoint POST /soap/DataService with authentication token sent over Authorization header, having the following settings in SoapAPI section of appsettings.json

image

I was expecting I got HTTP 200 OK response

Instead I’ve got HTTP 401 Unauthorized

Additional notes:

  • it used to work in 2025.10
  • Cookie authentization works well on SOAP API - the same way as before
  • It’s not possible to control wheter the cookie or token, or both is accepted the simillar way as it is with PrivateApiAuthentication configuration option for modeled custom APIs