llama-stack-mirror/.github
Derek Higgins c9dfd26385 fix(auth): allow unauthenticated access to health and version endpoints
The AuthenticationMiddleware was blocking all requests without an
Authorization header, including health and version endpoints that are
needed by monitoring tools, load balancers, and Kubernetes probes.

This commit adds a `require_authentication` parameter to the @webmethod
decorator (defaults to True). Endpoints can opt out of authentication by
setting `require_authentication=False`. The /health and /version endpoints
now use this parameter to allow unauthenticated access.

Changes:
- Add `require_authentication` field to WebMethod dataclass
- Update @webmethod decorator to accept `require_authentication` parameter
- Mark /health and /version endpoints with `require_authentication=False`
- Update middleware to check webmethod.require_authentication dynamically

Closes: #3735

Signed-off-by: Derek Higgins <derekh@redhat.com>
2025-10-09 20:14:34 +01:00
..
actions revert: feat(ci): use @next branch from llama-stack-client (#3593) 2025-09-29 10:41:04 -07:00
ISSUE_TEMPLATE docs: fix broken links (#3647) 2025-10-01 16:48:13 -07:00
workflows fix(auth): allow unauthenticated access to health and version endpoints 2025-10-09 20:14:34 +01:00
CODEOWNERS chore: update CODEOWNERS (#3613) 2025-10-03 17:12:34 -07:00
dependabot.yml fix(ci): dependabot update had a bug 2025-08-20 16:34:50 -07:00
PULL_REQUEST_TEMPLATE.md chore: fix visible comments in pr template (#2279) 2025-05-27 15:42:33 +02:00
TRIAGERS.md chore: update CODEOWNERS (#3613) 2025-10-03 17:12:34 -07:00