danhuawang opened a new issue, #12515:
URL: https://github.com/apache/gravitino/issues/12515
## What would you like to be improved?
The `/api/version` endpoint currently requires authentication. Accessing it
without credentials returns a 401 `UnauthorizedException`:
```
curl http://<host>:8090/api/version
{"code":1011,"type":"UnauthorizedException","message":"The provided
credentials did not support",...}
```
The version endpoint is a purely informational, read-only API that exposes
no sensitive data. Requiring authentication creates unnecessary friction for:
- Operators checking server version during deployment/upgrades
- Health monitoring tools and scripts that don't need full credentials
- Client compatibility checks before establishing an authenticated session
By contrast, the `/health` endpoint already bypasses authentication (via
`HealthCheckPathMatcher`), so there is an established pattern to follow.
## How should we improve?
Extend the authentication bypass in `AuthenticationFilter` (or
`HealthCheckPathMatcher`) to also skip authentication for `GET /api/version`,
similar to how health check paths are handled today.
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: [email protected]
For queries about this service, please contact Infrastructure at:
[email protected]
