allow open access for testing

NHSDigital · May 12, 2024 · 59d0ec5 · 59d0ec5
1 parent 6de64bb
commit 59d0ec5
Showing 1 changed file with 2 additions and 2 deletions.
diff --git a/proxies/live/apiproxy/targets/targetmhdspoctlsma.xml b/proxies/live/apiproxy/targets/targetmhdspoctlsma.xml
@@ -3,11 +3,11 @@
     <Request>
       <Step>
         <Name>VerifyApiKey.FromHeader</Name>
-        <Condition>request.header.Authorization Is null</Condition>
+        <Condition>(request.header.Authorization Is null) and (request.header.apikey IsNot null)</Condition>
       </Step>
       <Step>
         <Name>OauthV2.VerifyAccessTokenAppAllLevels</Name>
-        <Condition>request.header.apikey Is null</Condition>
+        <Condition>(request.header.apikey Is null) and (request.header.Authorization IsNot null)</Condition>
       </Step>
       <Step>
         <Name>FlowCallout.ApplyRateLimiting</Name>