Fallback to the token auth, not none

src/documents/tests/test_api_status.py

@@ -57,7 +57,7 @@ class TestSystemStatus(APITestCase):
         """
         response = self.client.get(self.ENDPOINT)
         self.assertEqual(response.status_code, status.HTTP_401_UNAUTHORIZED)
-        self.assertNotIn("WWW-Authenticate", response)
+        self.assertEqual(response["WWW-Authenticate"], "Token")
         normal_user = User.objects.create_user(username="normal_user")
         self.client.force_login(normal_user)
         response = self.client.get(self.ENDPOINT)

src/paperless/auth.py

@@ -89,4 +89,5 @@ class PaperlessBasicAuthentication(authentication.BasicAuthentication):
         if auth_header.lower().startswith("basic "):
             return super().authenticate_header(request)
 
-        return None
+        # Still 401 for anonymous API access
+        return authentication.TokenAuthentication.keyword