diff --git a/jams-server/src/main/java/net/jami/jams/server/servlets/filters/ApiFilter.java b/jams-server/src/main/java/net/jami/jams/server/servlets/filters/ApiFilter.java index 5d2384aa5580990af444b3aa6d64b2f483964651..da079d0ff2f67c41153dd02f3c1aee934669460e 100644 --- a/jams-server/src/main/java/net/jami/jams/server/servlets/filters/ApiFilter.java +++ b/jams-server/src/main/java/net/jami/jams/server/servlets/filters/ApiFilter.java @@ -56,9 +56,12 @@ public class ApiFilter implements Filter { } else { boolean authsuccess = false; boolean isLogin = false; + boolean isOCSPCheck = false; + if (request.getServletPath().contains("login")) isLogin = true; + else if (request.getServletPath().contains("ocsp")) isOCSPCheck = true; else authsuccess = doAuthCheck(request); - if (authsuccess || isLogin) { + if (authsuccess || isLogin || isOCSPCheck) { filterChain.doFilter(servletRequest, servletResponse); } else { TomcatCustomErrorHandler.sendCustomError(response,401,"You are not authenticated!");