API gateway sending multiple requests

Hi,

We are using OCI API Gateway with Basic Authentication enabled. When a client makes a request without credentials, the API Gateway correctly returns a 401 Unauthorized status and the browser shows a login prompt.

However, we are noticing the following issue:

• After the initial 401 response, the request appears to be sent to the backend multiple times, even though the credentials are still missing.

We would like to understand:

1. Why is the API Gateway forwarding the request to the backend before validating the Basic Auth credentials?

2. How can we configure the API Gateway to:

• Stop forwarding unauthenticated requests to the backend.