Revert "Enforce authentication on api/status route by default (#943)"

This reverts commit 6d6c5b7.
opensearch-project · Apr 16, 2022 · aa2cc97 · aa2cc97
1 parent 350e605
commit aa2cc97
Show file tree

Hide file tree

Showing 2 changed files with 2 additions and 14 deletions.
diff --git a/server/index.ts b/server/index.ts
@@ -70,14 +70,14 @@ export const configSchema = schema.object({
     }),
     anonymous_auth_enabled: schema.boolean({ defaultValue: false }),
     unauthenticated_routes: schema.arrayOf(schema.string(), {
-      defaultValue: ['/api/reporting/stats'],
+      defaultValue: ['/api/status', '/api/reporting/stats'],
     }),
     forbidden_usernames: schema.arrayOf(schema.string(), { defaultValue: [] }),
     logout_url: schema.string({ defaultValue: '' }),
   }),
   basicauth: schema.object({
     enabled: schema.boolean({ defaultValue: true }),
-    unauthenticated_routes: schema.arrayOf(schema.string(), { defaultValue: [] }),
+    unauthenticated_routes: schema.arrayOf(schema.string(), { defaultValue: ['/api/status'] }),
     forbidden_usernames: schema.arrayOf(schema.string(), { defaultValue: [] }),
     header_trumps_session: schema.boolean({ defaultValue: false }),
     alternative_login: schema.object({

diff --git a/test/jest_integration/basic_auth.test.ts b/test/jest_integration/basic_auth.test.ts
@@ -207,16 +207,4 @@ describe('start OpenSearch Dashboards server', () => {
 
     expect(response.status).toEqual(302);
   });
-
-  it('enforce authentication on api/status route', async () => {
-    const response = await osdTestServer.request.get(root, '/api/status');
-    expect(response.status).toEqual(401);
-  });
-
-  it('can access api/status route with admin credential', async () => {
-    const response = await osdTestServer.request
-      .get(root, '/api/status')
-      .set(AUTHORIZATION_HEADER_NAME, ADMIN_CREDENTIALS);
-    expect(response.status).toEqual(200);
-  });
 });