
So, I have the same problem as described here. The authentication setup follows this Appwrite tutorial.
Unlike the person from the topic above, I have a self-hosted Appwrite instance.
Here are the versions I’m using:
• Appwrite 1.6
• Nuxt 3.12
• Node 20.16
• Latest Appwrite SDKs
Authentication works fine on its own, but when I try to access a file that has read(users) permissions, I get an error.
I have an a_session cookie for the domain (I’ve tried different setups, e.g., localhost for both the frontend and self-hosted Appwrite, as well as Appwrite on stage-api.domain.com and the frontend on domain.com using the hosts file).
The cookies (a_session and a_session_console) are attached to the GET request, but the result is always the same: a 404 error, stating “you don’t have permissions”. Third-party cookies are enabled as well.
What else should I check? Sorry for duplicating the topic, but I still haven’t found a solution.

Look at the network logs in the browser for the request. See if the cookie is included in the headers or the cookies tab

they are included, as i was mentioned. in every request

yup )

I replaced parts of cookies with multidots just to make message shorter
"headers": {
"accept": "image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8",
"accept-language": "en,zh-CN;q=0.9,zh;q=0.8,ru;q=0.7,ko;q=0.6,en-GB;q=0.5,en-US;q=0.4,uk;q=0.3,pt;q=0.2",
"cache-control": "no-cache",
"pragma": "no-cache",
"priority": "u=2, i",
"sec-ch-ua": "\"Microsoft Edge\";v=\"129\", \"Not=A?Brand\";v=\"8\", \"Chromium\";v=\"129\"",
"sec-ch-ua-mobile": "?0",
"sec-ch-ua-platform": "\"macOS\"",
"sec-fetch-dest": "image",
"sec-fetch-mode": "no-cors",
"sec-fetch-site": "same-site",
"cookie": "a_session_666b23d5000a5c016b0f_legacy=eyJpZCI6IjY2NzA2NWE1.........iOTUxYWVlYTlhMTkzMDc2MGI0MjZhYzliM2QwYWVlNzJkNDBmYTNlODU3YmJlYTYzODMyZWI3MGJlYiJ9; a_session_666b23d5000a5c016b0f=eyJpZCI6Ij.........VlYTlhMTkzMDc2MGI0MjZhYzliM2QwYWVlNzJkNDBmYTNlODU3YmJlYTYzODMyZWI3MGJlYiJ9; a_session_console_legacy=eyJpZCI6IjY0OTMx..........QxZTJlNTc2MTQ5YmJmYTAyNGVjZmMxNDFkM2UxYjFjYTM5NGM2OThlMDY1YyJ9; a_session_console=eyJpZCI6IjY0OTMxZTllM2E3YmI1Z..........JlNTc2MTQ5YmJmYTAyNGVjZmMxNDFkM2UxYjFjYTM5NGM2OThlMDY1YyJ9; a_session_65255b5e286c4a640594_legacy=eyJpZCI6IjY1OGQ1.........YzJhZDZlNWZiYTcyNjJmOTQ4YzAzZWM1Mzg2MjA4ODkxNTFlMzNlNGE2Mjc1MDZjNmQ5MDVmYSJ9; a_session_65255b5e286c4a640594=eyJpZCI6IjY1OGQ.........2Mjc1MDZjNmQ5MDVmYSJ9",
"Referer": "https://travel.bitstarzhub.com:3000/",
"Referrer-Policy": "strict-origin-when-cross-origin"
},
"body": null,
"method": "GET"
});```

i also tried different options in platform settings e.g *, *domain.com. subdomian.domain.com etc

Deleting sensitive cookies

Do you have anything in front of your Appwrite instance?

they were not sensitive, but thanks.

no, nothing. no cloudflare or smth similar. pure nuxt js on local side and aws vps on appwrite

So you got this by looking at the browser developer tools and copying the request as fetch?
You're saying this request returned 404

yes, devtools, copy as fetch. yes, 404 also if i'm trying to visit direct link i have
"message": "The requested file could not be found.",
"code": 404,
"type": "storage_file_not_found",
"version": "1.6.0"
}```
and i'm sure that file is exist, coz it works with &mode=admin

and permissions is correct also
Recommended threads
- Unable to connect. Is the computer able ...
I found that there was few other support tickets with same topic, but neither of those seemed to solve my issue. I'm running a function when new user is created...
- Functions rate limit
Is there a way to remove function rate limit for specific users? "2025-06-01T08:45:26.143734953Z [Error] Method: POST 2025-06-01T08:45:26.143738753Z [Error] UR...
- Can't create a function. The user interf...
I am trying to create a server-side function. I am on the free tier. **I already have three functions that work properly** that I created a few months ago. Now,...
