It pays to read our announcements, specifically the release notes. 
Authentication requirements have been announced in advance in November via Upcoming changes: authentication for more API endpoints required.
And of course, this has also been mentioned explicitly in the release notes: