Make the tokeninfo endpoint unprotected as it is supposed to be avail…

…able to the public
owncloud · Sep 30, 2022 · a323cf3 · a323cf3
1 parent 3b95dcc
commit a323cf3
Show file tree

Hide file tree

Showing 2 changed files with 7 additions and 1 deletion.
diff --git a/changelog/unreleased/tokeninfo-endpoint-auth.md b/changelog/unreleased/tokeninfo-endpoint-auth.md
@@ -0,0 +1,5 @@
+Bugfix: Make tokeninfo endpoint unprotected
+
+Make the tokeninfo endpoint unprotected as it is supposed to be available to the public.
+
+https://github.com/owncloud/ocis/pull/4715
diff --git a/services/proxy/pkg/middleware/authentication.go b/services/proxy/pkg/middleware/authentication.go
@@ -24,7 +24,8 @@ var (
 	_publicPaths = [...]string{
 		"/dav/public-files/",
 		"/remote.php/dav/public-files/",
-		"/remote.php/ocs/apps/files_sharing/api/v1/tokeninfo/unprotected",
+		"/ocs/v1.php/apps/files_sharing/api/v1/tokeninfo/unprotected",
+		"/ocs/v2.php/apps/files_sharing/api/v1/tokeninfo/unprotected",
 		"/ocs/v1.php/cloud/capabilities",
 	}
 )