Merge pull request #95 from fqutishat/update

chore: pass webfinger endpoint from token check
trustbloc · Apr 6, 2022 · 222452d · 222452d
2 parents f578b6b + b0d9785
commit 222452d
Showing 1 changed file with 2 additions and 1 deletion.
diff --git a/cmd/vct/startcmd/start.go b/cmd/vct/startcmd/start.go
@@ -217,6 +217,7 @@ const (
 	defaultSyncTimeout    = "3"
 	healthCheckEndpoint   = "/healthcheck"
 	addVCEndpoint         = "/add-vc"
+	webFingerEndpoint     = "/.well-known/webfinger"
 )
 
 type (
@@ -1116,7 +1117,7 @@ func createJSONLDDocumentLoader(ldStore *ldStoreProvider, httpClient *http.Clien
 }
 
 func validateAuthorizationBearerToken(w http.ResponseWriter, r *http.Request, readToken, writeToken string) bool {
-	if r.RequestURI == healthCheckEndpoint {
+	if r.RequestURI == healthCheckEndpoint || strings.Contains(r.RequestURI, webFingerEndpoint) {
 		return true
 	}