Ignore API Key when accessing healthcheck endpoint

DFE-Digital · Jul 16, 2024 · 43d573c · 43d573c
1 parent dac0162
commit 43d573c
Showing 1 changed file with 7 additions and 1 deletion.
diff --git a/TramsDataApi/Middleware/ApiKeyMiddleware.cs b/TramsDataApi/Middleware/ApiKeyMiddleware.cs
@@ -20,6 +20,12 @@ public ApiKeyMiddleware(RequestDelegate next, ILogger<ApiKeyMiddleware> logger)
         }
         public async Task InvokeAsync(HttpContext context, IUseCase<string, ApiUser> apiKeyService)
         {
+            // Bypass API Key requirement for health check route
+            if (context.Request.Path == "/HealthCheck") {
+                await _next(context);
+                return;
+            }
+
             if (!context.Request.Headers.TryGetValue(APIKEYNAME, out var extractedApiKey))
             {
                 context.Response.StatusCode = 401;
@@ -43,4 +49,4 @@ public async Task InvokeAsync(HttpContext context, IUseCase<string, ApiUser> api
             }
         }
     }
-}
+}