Hello, I have just implemented bearer authentication. Is it possible to whitelist the urls on which ...

# ktor

[NicoLourenco]

Hello,
I have just implemented bearer authentication.
Is it possible to whitelist the urls on which I want the token to be added ?

[Júlio Santos]

Something how CORS, example.

install(CORS) {
        method(HttpMethod.Options)
        method(<http://HttpMethod.Post|HttpMethod.Post>)
        method(HttpMethod.Get)
        method(HttpMethod.Put)
        method(HttpMethod.Delete)
        method(HttpMethod.Head)
        header(HttpHeaders.AccessControlAllowHeaders)
        header(HttpHeaders.ContentType)
        header(HttpHeaders.AccessControlAllowOrigin)
        header(HttpHeaders.AccessControlAllowMethods)
        header("userToken")
        allowCredentials = true
        allowNonSimpleContentTypes = true
        hosts.addAll(initHostsOrigins(config))

[Júlio Santos]

private fun initHostsOrigins(config: ApplicationEnvironment) =
    config.property("cors.allowed-origins").getString().replace("\n", "")
        .split(",")
        .stream()
        .map { it.trim() }
        .filter { it.isNotBlank() }
        .collect(Collectors.toList())

[Aleksei Tirman [JB]]

You can use the sendWithoutRequest method to specify a condition for requests which must be send without waiting for the 401 response from a server. https://ktor.io/docs/bearer-client.html#configure