Merge pull request #9192 from dannon/authnz-require-login-fix

[20.01] Add require_login bypass for entire authnz controller.
2026-09-24 16:30:27 +08:00 · 2020-01-08 21:42:17 -05:00
parent 754a06077f b75f46a006
commit c6afa64986
1 changed files with 4 additions and 0 deletions
@@ -563,6 +563,10 @@ class GalaxyWebTransaction(base.DefaultWebTransaction,
                        return
                except IndexError:
                    pass
+            authnz_controller_base = url_for(controller='authnz', action='index')
+            if self.request.path.startswith(authnz_controller_base):
+                #  All authnz requests pass through
+                return
            # redirect to root if the path is not in the list above
            if self.request.path not in allowed_paths:
                login_url = url_for(controller='root', action='login', redirect=self.request.path)