Bearer authentication sends 401 to unprotected resources when no auth in progress --------------------------------------------------------------------------------- Key: ELY-1510 URL: https://issues.jboss.org/browse/ELY-1510 Project: WildFly Elytron Issue Type: Bug Reporter: Martin Mazanek Assignee: Martin Mazanek Fix For: 1.3.0.CR1 If you try to access unprotected resource with no Authorization header, BearerTokenAuthenticationMechanism sees it as a failed authentication so 401 is sent.