fix: dont require auth for healthchecks

[markphelps]

fixes: #2348

• Exclude health check endpoints from requiring authentication
• Also adds example using a static bootstrap token
• Adds IT to test health check endpoint for both authenticated and un-authenticated

Config

# config.yml

log:
  level: DEBUG

authentication:
  required: true
  session:
    domain: "localhost:8080"
    secure: false
    csrf:
      key: "abcdef1234567890"
  methods:
    token:
      enabled: true
      bootstrap:
        token: "secret"
        expiration: 24h
      cleanup:
        interval: 2h
        grace_period: 48h

Before

Healthcheck returns 401 Unauthorized if auth is enabled

~ » curl -v http://localhost:8080/health
*   Trying 127.0.0.1:8080...
* Connected to localhost (127.0.0.1) port 8080 (#0)
> GET /health HTTP/1.1
> Host: localhost:8080
> User-Agent: curl/8.1.2
> Accept: */*
>
< HTTP/1.1 401 Unauthorized
< Content-Type: application/json
< Www-Authenticate: request was not authenticated
< Date: Mon, 06 Nov 2023 15:07:02 GMT
< Content-Length: 68
<
* Connection #0 to host localhost left intact
{"code":16, "message":"request was not authenticated", "details":[]}

After

Healtcheck returns 200 OK even if auth is enabled

~ » curl -v http://localhost:8080/health
*   Trying 127.0.0.1:8080...
* Connected to localhost (127.0.0.1) port 8080 (#0)
> GET /health HTTP/1.1
> Host: localhost:8080
> User-Agent: curl/8.1.2
> Accept: */*
>
< HTTP/1.1 200 OK
< Content-Type: application/json
< Date: Mon, 06 Nov 2023 15:05:02 GMT
< Content-Length: 21
<
{"status":"SERVING"}

[github-actions]

Uffizzi Preview deployment-40137 was deleted.

[codecov]

Codecov Report

❗ No coverage uploaded for pull request base (release/1.30@b9d7d87). Click here to learn what that means.
The diff coverage is n/a.

❗ Current head 1e011b0 differs from pull request most recent head d596362. Consider uploading reports for the commit d596362 to get more accurate results

@@               Coverage Diff               @@
##             release/1.30    #2350   +/-   ##
===============================================
  Coverage                ?   70.81%           
===============================================
  Files                   ?       78           
  Lines                   ?     7442           
  Branches                ?        0           
===============================================
  Hits                    ?     5270           
  Misses                  ?     1872           
  Partials                ?      300           

📣 Codecov offers a browser extension for seamless coverage viewing on GitHub. Try it in Chrome or Firefox today!