[Bug]: STT test fails with 401 during onboarding

[gonzfe05]

Preflight Checklist

• I have searched existing issues and this hasn't been reported yet
• I am using the latest version of Moltis
• If this happened during a chat session, I included as much full session context as possible and redacted secrets

What happened?

During first-time onboarding, the STT (speech-to-text) "Test" button on the voice configuration step returns 401 AUTH_NOT_AUTHENTICATED. The onboarding page renders fine, but the API calls it makes are blocked by the auth middleware.

Environment

• Moltis v0.10.17 / v0.10.18
• Docker deployment, network_mode: host
• Browser: Chrome/Firefox on localhost

Expected behavior

Whisper transcribes the test audio and shows the result.

Steps to reproduce

1. Fresh Moltis install (v0.10.17/v0.10.18), no prior setup
2. Open https://localhost:13131 → redirects to /onboarding
3. Reach the voice/STT configuration step
4. Select whisper as STT provider, set up the token, click save
5. Click "Test"

Did this happen during a chat session?

None

Chat session context (if applicable)

Error messages / logs

Browser console shows:

POST https://localhost:13131/api/sessions/main/upload?transcribe=true&provider=whisper 401
{"code":"AUTH_NOT_AUTHENTICATED","error":"not authenticated"}

Is this a regression?

I don't know

Last working version

No response

Moltis version

Moltis v0.10.17 / v0.10.18

Component

Gateway / Web UI

Install method

Docker

Operating system

Ubuntu / Debian

Additional context

[gonzfe05]

Can't reproduce, issue must have been in my environment. Sorry about this.