Merge pull request #46 from matthew-mbe/allowopenacces

allow open access for testing
NHSDigital · May 12, 2024 · 4a4408a · 4a4408a
2 parents 6de64bb + 59d0ec5
commit 4a4408a
Showing 1 changed file with 2 additions and 2 deletions.
diff --git a/proxies/live/apiproxy/targets/targetmhdspoctlsma.xml b/proxies/live/apiproxy/targets/targetmhdspoctlsma.xml
@@ -3,11 +3,11 @@
     <Request>
       <Step>
         <Name>VerifyApiKey.FromHeader</Name>
-        <Condition>request.header.Authorization Is null</Condition>
+        <Condition>(request.header.Authorization Is null) and (request.header.apikey IsNot null)</Condition>
       </Step>
       <Step>
         <Name>OauthV2.VerifyAccessTokenAppAllLevels</Name>
-        <Condition>request.header.apikey Is null</Condition>
+        <Condition>(request.header.apikey Is null) and (request.header.Authorization IsNot null)</Condition>
       </Step>
       <Step>
         <Name>FlowCallout.ApplyRateLimiting</Name>