Server customization - How to create a Strapi v4 plugin

while I set a route as content-api type, I cannot visit it because of 401 UnauthorizedError, even if I pass the authorization token in the header of the request, Unless I set public in the user permission

How can I visit the API with the content-api type?