src/app.ts

@@ -203,18 +203,20 @@ export class GBServer {
               'admin': { password: process.env.ADMIN_PASS },
             };
 
-           // ... some not authenticated middlewares
+            // ... some not authenticated middlewares
 
             server.use((req, res, next) => {
-              var user = auth(req);
-              if (!user || !admins[user.name] || admins[user.name].password !== user.pass) {
-                res.set('WWW-Authenticate', 'Basic realm="example"');
-                return res.status(401).send();
+              if (req.originalUrl.startsWith('/logs')) {
+                var user = auth(req);
+                if (!user || !admins[user.name] || admins[user.name].password !== user.pass) {
+                  res.set('WWW-Authenticate', 'Basic realm="example"');
+                  return res.status(401).send();
+                }
               }
               return next();
             });
 
-           // If global log enabled, reorders transports adding web logging.
+            // If global log enabled, reorders transports adding web logging.
 
             const loggers = GBLog.getLogger();
             require('winston-logs-display')(server, loggers[1]);