From 498a53ab3def63b4df54f5e472d6fc6ec4e96f9d Mon Sep 17 00:00:00 2001
From: jebus <lorsbach@envipath.com>
Date: Fri, 5 Sep 2025 08:04:20 +1200
Subject: [PATCH] [Feature] Move Login exempt urls to settings (#86)

Co-authored-by: Tim Lorsbach <tim@lorsba.ch>
Reviewed-on: https://git.envipath.com/enviPath/enviPy/pulls/86
---
 envipath/settings.py                         | 6 ++++++
 epdb/middleware/login_required_middleware.py | 1 -
 2 files changed, 6 insertions(+), 1 deletion(-)

diff --git a/envipath/settings.py b/envipath/settings.py
index d2559db5..18dd8681 100644
--- a/envipath/settings.py
+++ b/envipath/settings.py
@@ -341,3 +341,9 @@ FLAGS = {
     'ENVIFORMER': ENVIFORMER_PRESENT,
     'APPLICABILITY_DOMAIN': APPLICABILITY_DOMAIN_ENABLED,
 }
+
+LOGIN_EXEMPT_URLS = [
+    '/api/legacy/',
+    '/o/token/',
+    '/o/userinfo/',
+]
diff --git a/epdb/middleware/login_required_middleware.py b/epdb/middleware/login_required_middleware.py
index 91ea1f6a..cd3a52ee 100644
--- a/epdb/middleware/login_required_middleware.py
+++ b/epdb/middleware/login_required_middleware.py
@@ -11,7 +11,6 @@ class LoginRequiredMiddleware:
                                reverse('logout'),
                                reverse('admin:login'),
                                reverse('admin:index'),
-                               '/api/legacy/'
                            ] + getattr(settings, 'LOGIN_EXEMPT_URLS', [])
 
     def __call__(self, request):