REST API has no authorization from internal request

Openhabian on raspberry pi 3b+
version 3.0.1

Hey Community,

i trie to use REST API to set the state of an item from my camera server with the request url

http://192.168.178.75:8080/rest/items/GtCamSwitch/state

i have activated the “Allow Basic Authentication” from api security, and got the following messages:

2021-02-15 10:17:40.856 [WARN ] [.transport.servlet.ServletController] - Can't find the request for http://192.168.178.75:8080/rest/things's Observer 
2021-02-15 10:17:40.856 [WARN ] [.transport.servlet.ServletController] - Can't find the request for http://192.168.178.75:8080/rest/inbox's Observer 
2021-02-15 10:17:40.856 [WARN ] [.transport.servlet.ServletController] - Can't find the request for http://192.168.178.75:8080/rest/items's Observer 
2021-02-15 10:17:40.859 [WARN ] [.transport.servlet.ServletController] - Can't find the request for http://192.168.178.75:8080/rest/ui/components/system:sitemap's Observer 

When the Rest Request is recieved, i get the following message:

2021-02-15 10:18:01.149 [WARN ] [ore.io.rest.auth.internal.AuthFilter] - Unauthorized API request: Invalid Basic authentication credentials
2021-02-15 10:18:02.170 [WARN ] [ore.io.rest.auth.internal.AuthFilter] - Unauthorized API request: Invalid Basic authentication credentials
2021-02-15 10:18:03.185 [WARN ] [ore.io.rest.auth.internal.AuthFilter] - Unauthorized API request: Invalid Basic authentication credentials

any idea how to fix this or am i doing something wrong?

Have you tried

http://user:password@192.168.178.75:8080/rest/items/GtCamSwitch/state

With default OH server settings, there is no need for authentication to use the items REST API.

when i trie this with “Allow Basic Auth…” enabled i get

2021-02-15 11:07:17.194 [WARN ] [s.impl.WebApplicationExceptionMapper] - javax.ws.rs.ClientErrorException: HTTP 405 Method Not Allowed

when i disable “Allow Basic Auth…” but leave user and passwd i get

2021-02-15 11:08:46.051 [WARN ] [ore.io.rest.auth.internal.AuthFilter] - Unauthorized API request: Invalid Basic authentication credentials 

like before.