changes

app/middleware/errors.py

@@ -101,13 +101,21 @@ async def http_exception_handler(request: Request, exc: HTTPException) -> JSONRe
         detail=message,
         path=request.url.path,
     )
-    return _build_error_response(
+    response = _build_error_response(
         request,
         status_code=exc.status_code,
         message=message,
         code="http_error",
         details=None,
     )
+    # Preserve any headers set on the HTTPException (e.g., WWW-Authenticate)
+    try:
+        if getattr(exc, "headers", None):
+            for key, value in exc.headers.items():
+                response.headers[key] = value
+    except Exception:
+        pass
+    return response
 
 
 async def validation_exception_handler(request: Request, exc: RequestValidationError) -> JSONResponse: