bug: certain REST API endpoints are still accessible when anonymous access is disabled

[wvandeun]

Component

API Server / GraphQL

Infrahub version

1.0.10, 1.1.0b2

Current Behavior

When you disable anonymous access using the INFRAHUB_ALLOW_ANONYMOUS_ACCESS environment variable, then certain REST API endpoints are still accessible when you are not authenticated (the list is not meant to be exhaustive):
/api/schema
/api/info
/api/menu
/api/docs

Expected Behavior

The above mentioned REST API endpoints should not be accessible when anonymous access is disabled and the user is not authenticated.

Steps to Reproduce

• start infrahub instance INFRAHUB_ALLOW_ANONYMOUS_ACCESS=false inv dev.start
• open the REST API endpoint http://localhost:8000/api/schema

Additional Information

No response