From 6f6bb872c5504d10829ba807747161f450b5826f Mon Sep 17 00:00:00 2001
From: Drew DeVault <sir@cmpwn.com>
Date: Wed, 7 Jun 2023 09:07:53 +0200
Subject: [PATCH] auth: add /query/external/* to anonymous whitelist

---
 auth/middleware.go | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/auth/middleware.go b/auth/middleware.go
index 61ab5d69cc2642ec4e32712186f29bab5dd34427..c1f6c493c69da1f4a526ec2ddaa43315a8f68eab 100644
--- a/auth/middleware.go
+++ b/auth/middleware.go
@@ -671,7 +671,8 @@ func Middleware(conf ini.File, apiconf string) func(http.Handler) http.Handler {
 		return http.HandlerFunc(func(w http.ResponseWriter, r *http.Request) {
 			if !strings.HasPrefix(r.URL.Path, "/query") ||
 				r.URL.Path == "/query/metrics" ||
-				r.URL.Path == "/query/api-meta.json" {
+				r.URL.Path == "/query/api-meta.json" ||
+				strings.HasPrefix(r.URL.Path, "/query/external/") {
 				next.ServeHTTP(w, r)
 				return
 			}