I have nopCommerce website and when testing in Facebook Sharing Debugger, it shows canonical url as "/login?ReturnUrl=%2F". Also Google Search Console says that my sitemap is not valid XML but a HTML page - I think google bots are also redirected to login page.
Facebook Sharing debugger screenshot here
Google Search Console screenshot here
My ACL Public Store rules are all set to enabled for customers and as you can see, you can visit all the pages without loging in. Why are google and facebook bots redirected through login page? How can I fix this?
Solution is to make sure that table [Customer_CustomerRole_Mapping] has two records:
Customer_Id | CustomerRole_Id
2 | 4
3 | 4
These represent permissions for search engine crawlers and etc. So these records give them same permissions as Guest.