Ignore API Key when accessing healthcheck endpoint (#534)

DFE-Digital · Jul 24, 2024 · 58ee71c · 58ee71c
1 parent 2b9f713
commit 58ee71c
Showing 1 changed file with 7 additions and 1 deletion.
diff --git a/TramsDataApi/Middleware/ApiKeyMiddleware.cs b/TramsDataApi/Middleware/ApiKeyMiddleware.cs
@@ -20,6 +20,12 @@ public ApiKeyMiddleware(RequestDelegate next, ILogger<ApiKeyMiddleware> logger)
         }
         public async Task InvokeAsync(HttpContext context, IUseCase<string, ApiUser> apiKeyService)
         {
+            // Bypass API Key requirement for health check route
+            if (context.Request.Path == "/HealthCheck") {
+                await _next(context);
+                return;
+            }
+
             if (!context.Request.Headers.TryGetValue(APIKEYNAME, out var extractedApiKey))
             {
                 context.Response.StatusCode = 401;
@@ -43,4 +49,4 @@ public async Task InvokeAsync(HttpContext context, IUseCase<string, ApiUser> api
             }
         }
     }
-}
+}