This jira is for information only.
Nuget Apikey does not work for some nuget commands like "nuget list". This is not a bug on Artifactory, but it is how it is designed in nuget client.
According to Nuget (https://docs.microsoft.com/en-us/nuget/tools/nuget-exe-cli-reference), the APIKey is only supported for a few commands like 'nuget push'. Artifactory knows how to consume the API Key when the nuget client sends it. However, Artifactory cannot use the key if the nuget client does not send it.
For the commands that the nuget client does not use Apikey for (e.g. nuget list), you can use the Package Source Credentials instead, as described in this document: https://www.jfrog.com/confluence/display/RTF/NuGet+Repositories#NuGetRepositories-WorkingWithoutAnonymousAccess