From b75f46a006df2a076ed9f46b588cc7417bc8797a Mon Sep 17 00:00:00 2001 From: Dannon Baker Date: Wed, 8 Jan 2020 16:04:00 -0500 Subject: [PATCH] Add require_login bypass for entire authnz controller. --- lib/galaxy/web/framework/webapp.py | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/lib/galaxy/web/framework/webapp.py b/lib/galaxy/web/framework/webapp.py index 31dd71bd584..273eb40cc69 100644 --- a/lib/galaxy/web/framework/webapp.py +++ b/lib/galaxy/web/framework/webapp.py @@ -563,6 +563,10 @@ class GalaxyWebTransaction(base.DefaultWebTransaction, return except IndexError: pass + authnz_controller_base = url_for(controller='authnz', action='index') + if self.request.path.startswith(authnz_controller_base): + # All authnz requests pass through + return # redirect to root if the path is not in the list above if self.request.path not in allowed_paths: login_url = url_for(controller='root', action='login', redirect=self.request.path)