wohali commented on issue #856: Bypass authentication check for /_up URL: https://github.com/apache/couchdb/pull/856#issuecomment-333412925 @rnewson Not sure which module you're referring to here. I _think_ the flow looks something like: `mochiweb` ? `chttpd:process_request` ? `chttpd:authenticate_request` ? (list of handlers, which starts with) `chttpd_auth:default_authentication_handler` ? `couch_httpd_auth:default_authentication_handler` which is why the patch ended up where it did. I can't put it in `chttpd_auth_request` because authorization happens after authentication, right? Happy to add the extra config check, that makes perfect sense. I could even see listing the endpoints to unprotect, though that's not strictly necessary. ---------------------------------------------------------------- This is an automated message from the Apache Git Service. To respond to the message, please log on GitHub and use the URL above to go to the specific comment. For queries about this service, please contact Infrastructure at: [email protected]
With regards, Apache Git Services
