Does public port still require withCredentials?

Hi,
My backend is set to a public port in my mono repo setup. When invoking the endpoint from my frontend without the withCredential header the invocation is failing. But with the header, it’s successful.

I thought we didn’t need to pass the withCredential flag with the public port. Is my understanding correct? or have I configured something incorrectly?