Add authentication only to specific endpoints

[Joly0]

Hey, i have some endpoints that i cannot add authentication to due to technical limitations on the sender side, but i would like to have authentication for all other (or just a few) endpoints. Is this possible? From look at the docs it looks like i can only use authentication for all endpoints or disable it for all of them.

Would be great to have more flexibility here (so like whitelist and blacklist) :)

[ncarlier]

I see maybe two options:

• add a parameter to skip authentification for specific base URL. Ex: --skip-authn-for=/public,/foo/anonymous
• dynamically detect if a .htpasswd file is present in targeted directory (such as Apache httpd). But in this case it can add some overhead on each requests.