Merge pull request #460 from pawel-siejba/fix/graph-ql-http-auth

Disable http auth for GraphQL endpoint
fastly · Jun 23, 2021 · 5f9c297 · 5f9c297
2 parents e3c9976 + c249724
commit 5f9c297
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/etc/vcl_snippets_basic_auth/recv.vcl b/etc/vcl_snippets_basic_auth/recv.vcl
@@ -2,7 +2,7 @@
   # locking themselves out. /oauth and /rest have their own auth so we can skip Basic Auth on them as well
   if ( table.lookup(magentomodule_basic_auth, regsub(req.http.Authorization, "^Basic ", ""), "NOTFOUND") == "NOTFOUND" &&
       !req.url ~ "^/(index\.php/)?####ADMIN_PATH####/" &&
-      !req.url ~ "^/(index\.php/)?(rest|oauth)/" &&
+      !req.url ~ "^/(index\.php/)?(rest|oauth|graphql)/" &&
       !req.url ~ "^/pub/static/" ) {
       error 771;
   }