From fd8b2a42fc97356dc2ea60c02068b23cbf3854f9 Mon Sep 17 00:00:00 2001
From: rafi <refaei.shikho@hotmail.com>
Date: Wed, 20 May 2026 19:37:23 +0200
Subject: [PATCH] fix: return 401 instead of 404 for disallowed public requests

Signed-off-by: rafi <refaei.shikho@hotmail.com>
---
 middlewares/access_control_middlewares.go | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/middlewares/access_control_middlewares.go b/middlewares/access_control_middlewares.go
index 36c18f909..e8fbc21d4 100644
--- a/middlewares/access_control_middlewares.go
+++ b/middlewares/access_control_middlewares.go
@@ -99,7 +99,7 @@ func DisallowPublicRequests(next echo.HandlerFunc) echo.HandlerFunc {
 	return func(ctx shared.Context) error {
 		if shared.IsPublicRequest(ctx) {
 			slog.Warn("access denied for public request in DisallowPublicRequests middleware")
-			return echo.NewHTTPError(404, "could not find resource")
+			return echo.NewHTTPError(401, "this endpoint is not accessible for public requests")
 		}
 		return next(ctx)
 	}