Environment: Ignition 8.3 EA (nightly build), standalone (non-inheritable) test project, Windows VM.
Issue: Every API request returns 401 Unauthorized, regardless of client or endpoint.
What I've tried (all fail identically with 401):
- curl.exe from host PC -> VM (network confirmed working: arp resolves, TCP port 8088 reachable, HTTP response received)
- curl.exe from inside the VM itself (localhost)
- Jython system.net.httpClient.post() from within Ignition's own Script Console (rules out any client-side/shell quoting issue)
Endpoints tried: /data/api/v1/gateway-info, /data/api/v1/resources/com.inductiveautomation.mcp/server-config
API key config tried:
- Security level: Authenticated (default, no custom restrictions)
- No IP allowlist, no expiration set
- Tried both "core" and "local" scope when creating the key - same 401 either way
- Tried with "Require secure connections for API Keys" both enabled and disabled - same 401 either way (note: enabling it over plain HTTP gives 401, not the 403 the docs describe)
- Generated a brand new key after each change, tested immediately
- Restarted the Gateway service after the most recent key creation - no change
Header used: X-Ignition-API-Token:
At this point I've ruled out network, client tooling, and (as far as I can tell from the UI) key configuration. Is there a known issue with API key auth in the current nightly, or something else I should check gateway-side (logs, a master enable toggle for the Gateway API, config sync state)?