Likely something is malformed with your PUT request then if GET is working when you are doing it the wrong way with the Authorization header. It is working because you don’t have to be authorized at all the make the GET request. We don’t even look at the Authorization header if you pass it in. GET requests to public endpoints will work fine without any headers.