Admin login in loop GET /api/tokens errro 400

Hi there,

I have had a working NPM instance with an access list set to IP. Everything was fine until I chose authorisation and later disabled it in the access list. Now I can't login right to admin on the domain. However, accessing the <IP_ADDRESS>:81 works, but I cannot see the proxy hosts records.

Here is the access log from the admin proxy host:

172.18.0.1 - - [28/Sep/2025:09:15:57 +0000] "POST /api/tokens HTTP/2.0" 200 593 "https://myweb.com/login" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Mobile Safari/537.36"
172.18.0.1 - - [28/Sep/2025:09:15:58 +0000] "GET /api/ HTTP/2.0" 200 61 "https://myweb.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Mobile Safari/537.36"
172.18.0.1 - - [28/Sep/2025:09:15:58 +0000] "GET /api/tokens HTTP/2.0" 400 49 "https://myweb.com/" "Mozilla/5.0 (Linux; Android

I have tried multiple browsers and devices with the same result. Can someone give me a lead on this?

Start by tracing the admin login requests to the GET /api/tokens endpoint and compare them with the successful POST /api/tokens request in the access log. Reproduce the issue after changing the access-list authorization setting, then determine what allows login through the IP address but causes the proxied admin request to return 400; done means the admin login works through the domain and proxy host records remain visible.