FIX: Authentication in work queue api made optional 2022.4

backend/Origam.Server/IApplicationBuilderExtensions.cs

@@ -105,7 +105,7 @@ public static void UseWorkQueueApi(this IApplicationBuilder app)
                 context => context.Request.Path.ToString().StartsWith("/workQueue"),
                 apiBranch =>
                 {
-                    apiBranch.UseMiddleware<UserApiTokenAuthenticationMiddleware>();
+                    apiBranch.UseMiddleware<OptionalTokenAuthenticationMiddleware>();
                     apiBranch.UseMvc(routes =>
                     {
                         routes.MapRoute("default", "{controller}/{action=Index}/{id?}");

backend/Origam.Server/Middleware/OptionalTokenAuthenticationMiddleware.cs

@@ -0,0 +1,40 @@
+#region license
+/*
+Copyright 2005 - 2023 Advantage Solutions, s. r. o.
+
+This file is part of ORIGAM (http://www.origam.org).
+
+ORIGAM is free software: you can redistribute it and/or modify
+it under the terms of the GNU General Public License as published by
+the Free Software Foundation, either version 3 of the License, or
+(at your option) any later version.
+
+ORIGAM is distributed in the hope that it will be useful,
+but WITHOUT ANY WARRANTY; without even the implied warranty of
+MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+GNU General Public License for more details.
+
+You should have received a copy of the GNU General Public License
+along with ORIGAM. If not, see <http://www.gnu.org/licenses/>.
+*/
+#endregion
+
+using System.Threading.Tasks;
+using Microsoft.AspNetCore.Authentication;
+using Microsoft.AspNetCore.Http;
+
+namespace Origam.Server.Middleware;
+
+
+// Request will continue if not authenticated
+class OptionalTokenAuthenticationMiddleware : UserApiTokenAuthenticationMiddleware
+{
+    public OptionalTokenAuthenticationMiddleware(RequestDelegate next, IAuthenticationSchemeProvider schemes) : base(next, schemes)
+    {
+    }
+
+    protected override async Task HandleUnauthorizedRequest(HttpContext context)
+    {
+        await _next(context);
+    }
+}

backend/Origam.Server/Middleware/UserApiTokenAuthenticationMiddleware.cs

@@ -37,7 +37,7 @@ namespace Origam.Server.Middleware;
 /// </summary>
 public class UserApiTokenAuthenticationMiddleware
 {
-    private readonly RequestDelegate _next;
+    protected readonly RequestDelegate _next;
 
     public UserApiTokenAuthenticationMiddleware(RequestDelegate next,
         IAuthenticationSchemeProvider schemes)
@@ -86,11 +86,17 @@ public async Task Invoke(HttpContext context)
         }
         else
         {
-            context.Response.StatusCode = 401;
+            await HandleUnauthorizedRequest(context);
             return;
         }
         await _next(context);
     }
+
+    protected virtual Task HandleUnauthorizedRequest(HttpContext context)
+    {
+        context.Response.StatusCode = 401;
+        return Task.CompletedTask;
+    }
 }
 
 class OrigamAuthenticationFeatures : IAuthenticateResultFeature, IHttpAuthenticationFeature