diff -ur a/dotCMS/src/main/java/com/dotcms/publisher/business/PublishAuditAPIImpl.java b/dotCMS/src/main/java/com/dotcms/publisher/business/PublishAuditAPIImpl.java
--- a/dotCMS/src/main/java/com/dotcms/publisher/business/PublishAuditAPIImpl.java	2026-07-01 15:34:05.176975676 +0000
+++ b/dotCMS/src/main/java/com/dotcms/publisher/business/PublishAuditAPIImpl.java	2026-07-01 15:34:05.176975676 +0000
@@ -16,6 +16,7 @@
 
 import java.util.ArrayList;
 import java.util.Arrays;
+import java.util.Collections;
 import java.util.Date;
 import java.util.List;
 import java.util.Map;
@@ -224,23 +225,29 @@
 	@CloseDBIfOpened
 	public List<PublishAuditStatus> getPublishAuditStatuses(List<String> bundleIds)
             throws DotPublisherException {
+		if (bundleIds == null || bundleIds.isEmpty()) {
+			return Collections.emptyList();
+		}
 		try {
 			final List<PublishAuditStatus> result = new ArrayList<>();
 
-			DotConnect dc = new DotConnect();
-			final List<String> parameter = bundleIds.stream().map(id -> "'" + id + "'").collect(Collectors.toList());
-
-			dc.setSQL(String.format(SELECT_ALL_BY_BUNDLES_IDS,  String.join(",", parameter)));
-			List<Map<String, Object>> items = dc.loadObjectResults();
+			final DotConnect dc = new DotConnect();
+			final String placeholders = bundleIds.stream()
+					.map(id -> "?")
+					.collect(Collectors.joining(","));
+
+			dc.setSQL(String.format(SELECT_ALL_BY_BUNDLES_IDS, placeholders));
+			bundleIds.forEach(dc::addParam);
+			final List<Map<String, Object>> items = dc.loadObjectResults();
 
-			for(Map<String, Object> item: items) {
-				result.add(turnIntoPublishAuditStatus(NO_LIMIT_ASSETS,  item));
+			for (final Map<String, Object> item : items) {
+				result.add(turnIntoPublishAuditStatus(NO_LIMIT_ASSETS, item));
 			}
 
 			return result;
-		}catch(Exception e){
-			Logger.debug(PublisherUtil.class,e.getMessage(),e);
-			throw new DotPublisherException("Unable to get list of elements with error:"+e.getMessage(), e);
+		} catch (Exception e) {
+			Logger.error(PublishAuditAPIImpl.class, e.getMessage(), e);
+			throw new DotPublisherException("Unable to get list of elements with error:" + e.getMessage(), e);
 		}
 
 	}
diff -ur a/dotCMS/src/main/java/com/dotcms/publisher/business/PublisherQueueJob.java b/dotCMS/src/main/java/com/dotcms/publisher/business/PublisherQueueJob.java
--- a/dotCMS/src/main/java/com/dotcms/publisher/business/PublisherQueueJob.java	2026-07-01 15:34:05.176975676 +0000
+++ b/dotCMS/src/main/java/com/dotcms/publisher/business/PublisherQueueJob.java	2026-07-01 15:34:05.176975676 +0000
@@ -15,6 +15,7 @@
 import com.dotcms.publisher.endpoint.business.PublishingEndPointAPI;
 import com.dotcms.publisher.environment.bean.Environment;
 import com.dotcms.publisher.environment.business.EnvironmentAPI;
+import com.dotcms.publisher.pusher.AuthCredentialPushPublishUtil;
 import com.dotcms.publisher.pusher.PushPublisher;
 import com.dotcms.publisher.pusher.PushPublisherConfig;
 import com.dotcms.publisher.util.PublisherUtil;
@@ -653,6 +654,7 @@
 
 		final String responseBody = webTarget
 				.request(MediaType.APPLICATION_JSON)
+				.header("Authorization", AuthCredentialPushPublishUtil.INSTANCE.getRequestToken(targetEndpoint).orElse(""))
 				.post(Entity.entity(bundleIds, MediaType.APPLICATION_JSON))
 				.readEntity(String.class);
 
diff -ur a/dotCMS/src/main/java/com/dotcms/publisher/pusher/AuthCredentialPushPublishUtil.java b/dotCMS/src/main/java/com/dotcms/publisher/pusher/AuthCredentialPushPublishUtil.java
--- a/dotCMS/src/main/java/com/dotcms/publisher/pusher/AuthCredentialPushPublishUtil.java	2026-07-01 15:34:05.176975676 +0000
+++ b/dotCMS/src/main/java/com/dotcms/publisher/pusher/AuthCredentialPushPublishUtil.java	2026-07-01 15:34:05.176975676 +0000
@@ -154,9 +154,9 @@
                 .startsWith(BEARER)) {
 
             return authorizationHeader.substring(BEARER.length());
-        } else {
-            throw new IllegalArgumentException("Bearer Authorization header expected");
         }
+
+        return StringUtils.EMPTY;
     }
 
     public static class PushPublishAuthenticationToken {
diff -ur a/dotCMS/src/main/java/com/dotcms/rest/AuditPublishingResource.java b/dotCMS/src/main/java/com/dotcms/rest/AuditPublishingResource.java
--- a/dotCMS/src/main/java/com/dotcms/rest/AuditPublishingResource.java	2026-07-01 15:34:05.176975676 +0000
+++ b/dotCMS/src/main/java/com/dotcms/rest/AuditPublishingResource.java	2026-07-01 15:34:05.176975676 +0000
@@ -3,18 +3,19 @@
 import com.dotcms.publisher.business.DotPublisherException;
 import com.dotcms.publisher.business.PublishAuditAPI;
 import com.dotcms.publisher.business.PublishAuditStatus;
+import com.dotcms.publisher.pusher.AuthCredentialPushPublishUtil;
 
+import javax.servlet.http.HttpServletRequest;
 import javax.ws.rs.*;
+import javax.ws.rs.core.Context;
 import javax.ws.rs.core.MediaType;
 import javax.ws.rs.core.Response;
 
-import com.dotmarketing.util.Config;
 import com.dotmarketing.util.Logger;
-import com.google.common.collect.Lists;
-import io.swagger.v3.oas.annotations.parameters.RequestBody;
 import io.swagger.v3.oas.annotations.tags.Tag;
 
 import java.util.List;
+import java.util.Optional;
 
 @Path("/auditPublishing")
 @Tag(name = "Publishing")
@@ -24,7 +25,18 @@
     @GET
     @Path("/get/{bundleId:.*}")
     @Produces(MediaType.TEXT_XML)
-    public Response get(@PathParam("bundleId") String bundleId) {
+    public Response get(@PathParam("bundleId") final String bundleId,
+                        @Context final HttpServletRequest request) {
+
+        final AuthCredentialPushPublishUtil.PushPublishAuthenticationToken ppAuthToken =
+                AuthCredentialPushPublishUtil.INSTANCE.processAuthHeader(request);
+
+        final Optional<Response> failResponse = PushPublishResourceUtil.getFailResponse(request, ppAuthToken);
+
+        if (failResponse.isPresent()) {
+            return failResponse.get();
+        }
+
         PublishAuditStatus status = null;
 
         try {
@@ -42,7 +54,18 @@
     @POST
     @Path("/getAll")
     @Produces(MediaType.APPLICATION_JSON)
-    public Response getAll( List<String> bundleIds) {
+    public Response getAll(final List<String> bundleIds,
+                           @Context final HttpServletRequest request) {
+
+        final AuthCredentialPushPublishUtil.PushPublishAuthenticationToken ppAuthToken =
+                AuthCredentialPushPublishUtil.INSTANCE.processAuthHeader(request);
+
+        final Optional<Response> failResponse = PushPublishResourceUtil.getFailResponse(request, ppAuthToken);
+
+        if (failResponse.isPresent()) {
+            return failResponse.get();
+        }
+
         try {
             final List<PublishAuditStatus> statuses = auditAPI.getPublishAuditStatuses(bundleIds);