What app is this about, and its version: 2.20.3~ynh2
What YunoHost version are you running: 12.1.39
What type of hardware are you using: Old laptop or computer
Describe your issue
I tried to enable document upload via API with the app available only to selected users, while the API being available to visitors. Nevertheless, this inhibits upload and nginx returns 302. Is this intended, if so, what is the rationale behind this configuration?
Share relevant logs or error messages
Verbose output from curl test:
curl -X POST \
-H "Authorization: Token YOUR_API_TOKEN" \
-F "document=@/path/to/your/document.pdf" \
-F "title=My Document Title" \
https://<domain>/api/documents/post_document/
[...]
`* TLSv1.3 (IN), TLS handshake, Newsession Ticket (4):`
`* TLSv1.3 (IN), TLS handshake, Newsession Ticket (4):`
`< HTTP/2 302 `
`< server: nginx`
`< date: Mon, 19 Jan 2026 00:00:00 GMT`
`< content-type: text/html`
`< content-length: 138`
`< location: https://<domain>/yunohost/sso?r=<long-token>`
`< x-sso-wat: You've just been SSOed`
`< content-security-policy: upgrade-insecure-requests`
`< x-content-type-options: nosniff`
`< x-xss-protection: 1; mode=block`
`< x-download-options: noopen`
`< x-permitted-cross-domain-policies: none`
`< x-frame-options: SAMEORIGIN`
`< permissions-policy: interest-cohort=()`
`< strict-transport-security: max-age=63072000; includeSubDomains; preload`
`* HTTP error before end of send, stop sending`
`* abort upload after having sent 130775 bytes`
`< `
`<html>`
`<head><title>302 Found</title></head>`
`<body>`
`<center><h1>302 Found</h1></center>`
`<hr><center>nginx</center>`
`</body>`
`</html>`
`* Connection #0 to host <domain> left intact`