[BUG] Unauthenticated Item Posts API request returns 403 while web shows item posts

[lcandy2]

Instance Domain
neodb.social tested

Server Version
all

Description
On the web, item posts are visible without login.
But when calling the API for the same item posts without authentication, it returns 403 Forbidden.

Expected Behavior

API response should match the web: allow unauthenticated access to item posts.

Actual Behavior / Steps to Reproduce
1. Open item page on the web (not logged in) → posts are visible
2. Call the API endpoint for the same item posts (not logged in) → 403

Possible Fix
as expected behavior says.