fix: allow requests to /healthz without authentication (#1896)

* fix: allow requests to /healthz without authentication * allow unauthed requests to /status
runatlantis · Nov 15, 2021 · f5b6ab0 · f5b6ab0
1 parent 24001aa
commit f5b6ab0
Showing 1 changed file with 4 additions and 1 deletion.
diff --git a/server/middleware.go b/server/middleware.go
@@ -43,7 +43,10 @@ type RequestLogger struct {
 func (l *RequestLogger) ServeHTTP(rw http.ResponseWriter, r *http.Request, next http.HandlerFunc) {
 	l.logger.Debug("%s %s – from %s", r.Method, r.URL.RequestURI(), r.RemoteAddr)
 	allowed := false
-	if r.URL.Path == "/events" || !l.WebAuthentication {
+	if !l.WebAuthentication ||
+		r.URL.Path == "/events" ||
+		r.URL.Path == "/healthz" ||
+		r.URL.Path == "/status" {
 		allowed = true
 	} else {
 		user, pass, ok := r.BasicAuth()