allow health without auth

This commit is contained in:
Mateusz Gruszczyński
2026-05-25 21:50:29 +02:00
parent 1df01e8cc6
commit 680a673a9a

View File

@@ -668,9 +668,15 @@ def install_guards(app) -> None:
def _auth_guard(): def _auth_guard():
if not enabled(): if not enabled():
return None return None
# Allow unauthenticated health checks for monitoring.
if request.path == "/api/health" or request.path.startswith("/api/health/"):
return None
g.api_token_authenticated = False g.api_token_authenticated = False
if auth_bypassed_request(): if auth_bypassed_request():
return None return None
if request.path.startswith("/api/"): if request.path.startswith("/api/"):
token_user = authenticate_api_token(_request_api_token()) token_user = authenticate_api_token(_request_api_token())
if token_user: if token_user: