"401 Content access is protected by token" authentication failure while performing maven release

I banged my head on this problem for two days. I’m fairly certain the root cause was my skipping the step to publish my gpg key e.g

gpg --keyserver keyserver.ubuntu.com --send-keys XXXXXXX

where XXXXXX is the key I signed my artifacts with.

I also change my github action to post archives to central instead of s01:

      curl --request POST \
            --verbose \
            --header "Authorization: Bearer $SONATYPE_TOKEN" \
            --form bundle=@./api/build/zips/api.zip \
            https://central.sonatype.com/api/v1/publisher/upload

the token is a base64 encoded username:password provided by the user token.

printf username:password | base64

This is publishing without dealing with publish gradle plugins…