This works fine for author. When it comes to publisher, it works even without authentication. Our use case is, we should not allow to retrieve content without authorization in publisher as well.
At Present, We use content fragments in AEM and we have multiple team consume CF using assets API.I noticed that in my environment, the api request to author instance requires authentication whereas request exposed by the publish instance are served without authentication. I need to expose the api ...