Allow requests in KeeperAuthFilter if anonymous mode is enabled on this instance.

Author: byteduck-exploit

src/main/kotlin/org/exploit/keeper/filter/KeeperAuthFilter.kt

@@ -7,11 +7,13 @@ import jakarta.ws.rs.container.ContainerRequestContext
 import jakarta.ws.rs.container.ContainerRequestFilter
 import jakarta.ws.rs.ext.Provider
 import org.exploit.keeper.api.auth.KeeperAuthenticator
+import org.exploit.keeper.config.KeeperConfig
 import org.exploit.keeper.service.client.BitKeeperClients
 
 @Provider
 @Priority(Priorities.AUTHENTICATION)
 class KeeperAuthFilter(
+    private val config: KeeperConfig,
     private val clients: BitKeeperClients
 ) : ContainerRequestFilter {
 
@@ -21,6 +23,9 @@ class KeeperAuthFilter(
         if (path.startsWith("/v1/keeper"))
             return
 
+        if (config.auth().allowAnonymous())
+            return
+
         val instanceId = p0.getHeaderString(KeeperAuthenticator.HEADER_INSTANCE_ID)
             ?.toIntOrNull()
             ?: throw NotAuthorizedException("Invalid instance id")