api.go: only pass through GET requests to /health

This commit is contained in:
Hector Sanjuan 2023-05-11 12:11:21 +02:00 committed by GitHub
parent 9cb2219636
commit 287f285d79
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23

View File

@ -302,7 +302,7 @@ func (api *API) authHandler(h http.Handler, lggr *logging.ZapEventLogger) http.H
wrap := func(w http.ResponseWriter, r *http.Request) {
// We let CORS preflight requests pass through the next
// handler.
if r.Method == http.MethodOptions || r.URL.Path == "/health" {
if r.Method == http.MethodOptions || (r.Method == http.MethodGet && r.URL.Path == "/health") {
h.ServeHTTP(w, r)
return
}