If Groupshare services hosting the RestAPI endpoints is missing authorization, then it will fail.
There is no setting that you can configure for running behind a proxy, as Groupshare does not need to know it's behind a proxy. This needs to be configured from the proxy, either to not remove specific headers or to re-add it.
For more information please check the WebSeal documentation:
https://www.ibm.com/support/knowledgecenter/en/SSPREK_9.0.6/com.ibm.isam.doc/wrp_config/concept/con_http_transforms.html.
As noted there "WebSEAL administrators can configure the following modifications. You can apply these transformations to HTTP requests and HTTP responses (except where otherwise noted):
- Add a header
- Remove a header
- Modify an existing header"