- 401 Unauthorized
- The API did not accept the request as authenticated. Check the tile auth profile, token URL, Keycloak realm, client id/secret, and whether the deployed API expects a different auth server.
- 403 Forbidden
- The token was accepted, but the service account does not have the required role. Add the expected realm role, such as
db_read or file_read, to the scanner service account in the API's realm.
- 404 Not Found
- The server responded, but the endpoint path was not found. Check the IIS application folder plus controller route, for example
Folder/Controller/corecheck.
- 500 Server Error
- The endpoint was found, but the application failed. Check the app pool, .NET hosting bundle/runtime, appsettings environment, database access, logs, and missing files.