Description
Currently any Amphora plugin can only accept GET requests because of this line: https://github.com/clay/amphora/blob/master/lib/auth.js#L69
Reported by @jjpaulino
Steps to Reproduce
Steps to reproduce the behavior:
- Make any plugin which accepts a request other than
GET or OPTIONS
- Execute a request to the plugin
- See requirement for authentication
Expected Behavior
A plugin should be able to opt-out of authentication requirements
Additional Context
We should make the authentication requirement a default but allow plugins to opt-out. This will require moving the function which is enforcing this to be applied individually to core routes and then a test for plugin routes will need to be added.
Description
Currently any Amphora plugin can only accept
GETrequests because of this line: https://github.com/clay/amphora/blob/master/lib/auth.js#L69Reported by @jjpaulino
Steps to Reproduce
Steps to reproduce the behavior:
GETorOPTIONSExpected Behavior
A plugin should be able to opt-out of authentication requirements
Additional Context
We should make the authentication requirement a default but allow plugins to opt-out. This will require moving the function which is enforcing this to be applied individually to core routes and then a test for plugin routes will need to be added.