feature: AuthBridge should have options to NOT validate on selected routes

[maia-iyer]

Feature Description

For agents and tools, there are sometimes public endpoints that should not be OAuth secured such as the AgentCard or any other metadata used for discovery. Currently AuthProxy enforces checks/behaviors on all calls.

Proposed Solution

There needs to be a way to configure AuthProxy to bypass checks for certain routes.

Want to contribute?

• I would like to work on this issue.

Additional Context

No response

[huang195]

I read up a bit on this, and it looks like Agent Card is accessible at: /.well-known/agent.json. This is similar in convention to some of the OIDC endpoints that don't require any auth, e.g., /.well-known/openid-configuration. We can try to filter with /.well-known/*. In addition to these, we should probably also let these URL bypass as well: /healthz, /readyz, /livez.