diff --git a/src/tests/_internal/server/routers/test_files.py b/src/tests/_internal/server/routers/test_files.py
index 931a24b56..28f851e1c 100644
--- a/src/tests/_internal/server/routers/test_files.py
+++ b/src/tests/_internal/server/routers/test_files.py
@@ -27,7 +27,7 @@ async def test_returns_403_if_not_authenticated(self, client: AsyncClient):
             "/api/files/get_archive_by_hash",
             json={"hash": "blob_hash"},
         )
-        assert response.status_code == 403
+        assert response.status_code in [401, 403]
 
     async def test_returns_400_if_archive_does_not_exist(
         self, session: AsyncSession, client: AsyncClient
@@ -81,7 +81,7 @@ async def test_returns_403_if_not_authenticated(self, client: AsyncClient):
             "/api/files/upload_archive",
             files={"file": self.file},
         )
-        assert response.status_code == 403
+        assert response.status_code in [401, 403]
 
     async def test_returns_existing_archive(
         self, session: AsyncSession, client: AsyncClient, default_storage_mock: Mock
diff --git a/src/tests/_internal/server/routers/test_fleets.py b/src/tests/_internal/server/routers/test_fleets.py
index 934f333b6..43301aea6 100644
--- a/src/tests/_internal/server/routers/test_fleets.py
+++ b/src/tests/_internal/server/routers/test_fleets.py
@@ -58,7 +58,7 @@ async def test_returns_40x_if_not_authenticated(
         self, test_db, session: AsyncSession, client: AsyncClient
     ):
         response = await client.post("/api/fleets/list")
-        assert response.status_code == 403
+        assert response.status_code in [401, 403]
 
     @pytest.mark.asyncio
     @pytest.mark.parametrize("test_db", ["sqlite", "postgres"], indirect=True)
@@ -147,7 +147,7 @@ async def test_returns_40x_if_not_authenticated(
         self, test_db, session: AsyncSession, client: AsyncClient
     ):
         response = await client.post("/api/project/main/fleets/list")
-        assert response.status_code == 403
+        assert response.status_code in [401, 403]
 
     @pytest.mark.asyncio
     @pytest.mark.parametrize("test_db", ["sqlite", "postgres"], indirect=True)
@@ -188,7 +188,7 @@ async def test_returns_40x_if_not_authenticated(
         self, test_db, session: AsyncSession, client: AsyncClient
     ):
         response = await client.post("/api/project/main/fleets/get")
-        assert response.status_code == 403
+        assert response.status_code in [401, 403]
 
     @pytest.mark.asyncio
     @pytest.mark.parametrize("test_db", ["sqlite", "postgres"], indirect=True)
@@ -309,7 +309,7 @@ async def test_returns_40x_if_not_authenticated(
         self, test_db, session: AsyncSession, client: AsyncClient
     ):
         response = await client.post("/api/project/main/fleets/apply")
-        assert response.status_code == 403
+        assert response.status_code in [401, 403]
 
     @pytest.mark.asyncio
     @pytest.mark.parametrize("test_db", ["sqlite", "postgres"], indirect=True)
@@ -829,7 +829,7 @@ async def test_returns_40x_if_not_authenticated(
         self, test_db, session: AsyncSession, client: AsyncClient
     ):
         response = await client.post("/api/project/main/fleets/delete")
-        assert response.status_code == 403
+        assert response.status_code in [401, 403]
 
     @pytest.mark.asyncio
     @pytest.mark.parametrize("test_db", ["sqlite", "postgres"], indirect=True)
@@ -942,7 +942,7 @@ async def test_returns_40x_if_not_authenticated(
         self, test_db, session: AsyncSession, client: AsyncClient
     ):
         response = await client.post("/api/project/main/fleets/delete_instances")
-        assert response.status_code == 403
+        assert response.status_code in [401, 403]
 
     @pytest.mark.asyncio
     @pytest.mark.parametrize("test_db", ["sqlite", "postgres"], indirect=True)
@@ -1036,7 +1036,7 @@ async def test_returns_40x_if_not_authenticated(
         self, test_db, session: AsyncSession, client: AsyncClient
     ):
         response = await client.post("/api/project/main/fleets/get_plan")
-        assert response.status_code == 403
+        assert response.status_code in [401, 403]
 
     @pytest.mark.asyncio
     @pytest.mark.parametrize("test_db", ["sqlite", "postgres"], indirect=True)
diff --git a/src/tests/_internal/server/routers/test_gateways.py b/src/tests/_internal/server/routers/test_gateways.py
index 6d06e6969..0bee1e6f0 100644
--- a/src/tests/_internal/server/routers/test_gateways.py
+++ b/src/tests/_internal/server/routers/test_gateways.py
@@ -26,7 +26,7 @@ async def test_returns_40x_if_not_authenticated(
         self, test_db, session: AsyncSession, client: AsyncClient
     ):
         response = await client.post("/api/project/main/gateways/list")
-        assert response.status_code == 403
+        assert response.status_code in [401, 403]
 
     @pytest.mark.asyncio
     @pytest.mark.parametrize("test_db", ["sqlite", "postgres"], indirect=True)
diff --git a/src/tests/_internal/server/routers/test_instances.py b/src/tests/_internal/server/routers/test_instances.py
index 72198331d..f4fe924e4 100644
--- a/src/tests/_internal/server/routers/test_instances.py
+++ b/src/tests/_internal/server/routers/test_instances.py
@@ -265,7 +265,7 @@ async def test_pagination(
 
     async def test_not_authenticated(self, client: AsyncClient, data) -> None:
         resp = await client.post("/api/instances/list", json={})
-        assert resp.status_code == 403
+        assert resp.status_code in [401, 403]
 
 
 @pytest.mark.asyncio
diff --git a/src/tests/_internal/server/routers/test_prometheus.py b/src/tests/_internal/server/routers/test_prometheus.py
index 0678d0197..ab9549965 100644
--- a/src/tests/_internal/server/routers/test_prometheus.py
+++ b/src/tests/_internal/server/routers/test_prometheus.py
@@ -375,7 +375,7 @@ async def test_returns_403_if_not_authenticated(
         else:
             headers = None
         response = await client.get("/metrics", headers=headers)
-        assert response.status_code == 403
+        assert response.status_code in [401, 403]
 
     async def test_returns_200_if_token_is_valid(
         self, monkeypatch: pytest.MonkeyPatch, client: AsyncClient
diff --git a/src/tests/_internal/server/routers/test_volumes.py b/src/tests/_internal/server/routers/test_volumes.py
index fa55e97a7..1949747f6 100644
--- a/src/tests/_internal/server/routers/test_volumes.py
+++ b/src/tests/_internal/server/routers/test_volumes.py
@@ -32,7 +32,7 @@ async def test_returns_40x_if_not_authenticated(
         self, test_db, session: AsyncSession, client: AsyncClient
     ):
         response = await client.post("/api/volumes/list")
-        assert response.status_code == 403
+        assert response.status_code in [401, 403]
 
     @pytest.mark.asyncio
     @pytest.mark.parametrize("test_db", ["sqlite", "postgres"], indirect=True)
@@ -198,7 +198,7 @@ async def test_returns_40x_if_not_authenticated(
         self, test_db, session: AsyncSession, client: AsyncClient
     ):
         response = await client.post("/api/project/main/volumes/list")
-        assert response.status_code == 403
+        assert response.status_code in [401, 403]
 
     @pytest.mark.asyncio
     @pytest.mark.parametrize("test_db", ["sqlite", "postgres"], indirect=True)
@@ -249,7 +249,7 @@ async def test_returns_40x_if_not_authenticated(
         self, test_db, session: AsyncSession, client: AsyncClient
     ):
         response = await client.post("/api/project/main/volumes/get")
-        assert response.status_code == 403
+        assert response.status_code in [401, 403]
 
     @pytest.mark.asyncio
     @pytest.mark.parametrize("test_db", ["sqlite", "postgres"], indirect=True)
@@ -316,7 +316,7 @@ async def test_returns_40x_if_not_authenticated(
         self, test_db, session: AsyncSession, client: AsyncClient
     ):
         response = await client.post("/api/project/main/volumes/create")
-        assert response.status_code == 403
+        assert response.status_code in [401, 403]
 
     @pytest.mark.asyncio
     @pytest.mark.parametrize("test_db", ["sqlite", "postgres"], indirect=True)
@@ -366,7 +366,7 @@ async def test_returns_40x_if_not_authenticated(
         self, test_db, session: AsyncSession, client: AsyncClient
     ):
         response = await client.post("/api/project/main/volumes/delete")
-        assert response.status_code == 403
+        assert response.status_code in [401, 403]
 
     @pytest.mark.asyncio
     @pytest.mark.parametrize("test_db", ["sqlite", "postgres"], indirect=True)