Amphora Plugins Auth Requirement
Opened this issue · 0 comments
jonwinton commented
Description
Currently any Amphora plugin can only accept GET
requests because of this line: https://github.com/clay/amphora/blob/master/lib/auth.js#L69
Reported by @jjpaulino
Steps to Reproduce
Steps to reproduce the behavior:
- Make any plugin which accepts a request other than
GET
orOPTIONS
- Execute a request to the plugin
- See requirement for authentication
Expected Behavior
A plugin should be able to opt-out of authentication requirements
Additional Context
We should make the authentication requirement a default but allow plugins to opt-out. This will require moving the function which is enforcing this to be applied individually to core routes and then a test for plugin routes will need to be added.