"Bad Signed Url" error from Access API

[ekraffmiller]

When downloading with guestbook in the SPA, sometimes using the signedUrl returns a "bad signedUrl" error.

What steps does it take to reproduce the issue?

1. Create a dataset with file and assign a guestbook to it.
2. Publish the file
3. In the SPA log in as another user (not the user that published the dataset)
4. Click "Access File", sign the guestbook
5. The "Bad Signed Url" error appears in the browser, and the console shows a 401 error returned by the url

Examples of urls that got this error:

http://localhost:8000/api/v1/access/datafile/3?gbrecs=true&format=original&gbrids=20&until=2026-04-01T12:12:41.262&user=cookie&method=GET&token=d885943a00865f8250aa0991c479cac008a42ad332988c8bc79be07b43bcd0d0bf285b65dfb5e7643fed79c05968d9a0410ab38cb436457de3a4261375d5da95

http://localhost:8000/api/v1/access/datafile/3?gbrecs=true&format=original&gbrids=25&until=2026-04-01T12:42:46.207&user=bert&method=GET&token=e2e7bdf4c280a29eee9e325965831c8927ac9215ac1c9753ef04af8b11dbf41a36baf2b22ee0f96cc387141b448173941275dbdc9ae53cba02b156463dacb2b4

• When does this issue occur?
  It happens intermittently. It usually occurs the first time a newly created user tries to download the file. In subsequent tries, sometimes it works, sometimes it doesn't