ironic-inspector/releasenotes/notes/http-basic-public-api-2cf0e206bea4b34e.yaml
Steve Baker 92c64226f4 Add public api support to basic auth
This change implements an alternative middleware which supports the
same deferred auth mechanism as the keystone auth middleware.

When auth fails the header X-Identity-Status is set to Invalid, which
only becomes an Unauthorized response when the path is not public.

Without this change, the paths /, /v1 and /v1/continue
incorrectly require authentication when using basic auth.

Change-Id: I780151870f851ad5dcd45610aacedcca23607a71
Story: 2007656
Task: 39826
2020-07-23 10:53:11 +12:00

6 lines
156 B
YAML

---
fixes:
- |
Using auth_strategy=http_basic incorrectly required authentication for
public paths such as / and /v1. These paths are now public.