profile: Fix node info listing to not require any tenant info headers. …

…Fixes #506
killbill · Dec 27, 2016 · 9a9ee0a · 9a9ee0a · pierre · Dec 28, 2016
1 parent f7242b6
commit 9a9ee0a
Showing 1 changed file with 5 additions and 5 deletions.
diff --git a/profiles/killbill/src/main/java/org/killbill/billing/server/security/TenantFilter.java b/profiles/killbill/src/main/java/org/killbill/billing/server/security/TenantFilter.java
@@ -136,9 +136,9 @@ private boolean shouldContinueIfTenantInformationIsWrongOrMissing(final ServletR
             if (    // Chicken - egg problem
                     isTenantCreationRequest(path, httpMethod) ||
                     // Retrieve user permissions should not require tenant info since this is cross tenants
-                    isPermissionRequest(path, httpMethod) ||
+                    isPermissionRequest(path) ||
                     // Node request are cross tenant
-                    isNodeCreationRequest(path, httpMethod) ||
+                    isNodeInfoRequest(path) ||
                     // Metrics servlets
                     isMetricsRequest(path, httpMethod) ||
                     // See KillBillShiroWebModule#CorsBasicHttpAuthenticationFilter
@@ -157,16 +157,16 @@ private boolean shouldContinueIfTenantInformationIsWrongOrMissing(final ServletR
 
 
 
-    private boolean isPermissionRequest(final String path, final String httpMethod) {
+    private boolean isPermissionRequest(final String path) {
         return path != null && path.startsWith(JaxrsResource.SECURITY_PATH);
     }
 
     private boolean isTenantCreationRequest(final String path, final String httpMethod) {
         return JaxrsResource.TENANTS_PATH.equals(path) && "POST".equals(httpMethod);
     }
 
-    private boolean isNodeCreationRequest(final String path, final String httpMethod) {
+    private boolean isNodeInfoRequest(final String path) {
-        return JaxrsResource.NODES_INFO_PATH.equals(path) && "POST".equals(httpMethod);
+        return JaxrsResource.NODES_INFO_PATH.equals(path);
     }
 
     private boolean isMetricsRequest(final String path, final String httpMethod) {