secretjs.query.snip721.GetOwnedTokens public ownership 

I'm using secretjs 1.5.1.
I have a Stashh collection with public ownership. GetOwnedTokens works if I pass a viewer or a permit with signature received with keplr.signAmino.  Does it should work also without permit or viewer since my collection has a public owenership? Or it correct that it doesn't work if I don't pass the "auth" value?