diff --git a/src/security/auth.rs b/src/security/auth.rs
index aa8e18cf3..90ff4441c 100644
--- a/src/security/auth.rs
+++ b/src/security/auth.rs
@@ -530,6 +530,14 @@ impl Default for AuthConfig {
                 "/api/v1/health".to_string(),
                 "/.well-known".to_string(),
                 "/metrics".to_string(),
+                "/api/auth/login".to_string(),
+                "/api/auth/logout".to_string(),
+                "/api/auth/refresh".to_string(),
+                "/api/auth/bootstrap".to_string(),
+                "/api/auth/2fa/verify".to_string(),
+                "/api/auth/2fa/resend".to_string(),
+                "/oauth".to_string(),
+                "/auth/callback".to_string(),
             ],
             public_paths: vec![
                 "/".to_string(),