From 0deb1758e4fc42da84a3d0d1eced8ffa3da0449d Mon Sep 17 00:00:00 2001
From: mildis <me@mildis.org>
Date: Wed, 2 Dec 2020 08:53:07 +0100
Subject: [PATCH] list unauthenticated endpoints

Ease the setup of a WAF or a reverse-proxy.

Fixes #233
---
 README.md | 18 ++++++++++++++++++
 1 file changed, 18 insertions(+)

diff --git a/README.md b/README.md
index 5e18ce3..2b4d395 100644
--- a/README.md
+++ b/README.md
@@ -68,6 +68,24 @@ Lufi comes with several languages.
 
 Please, see [this wiki page](https://framagit.org/fiat-tux/hat-softwares/lufi/wikis/contribute#internationalization) to know how to contribute to internationalization.
 
+## API endpoints
+
+Some endpoints require authentication, others don't.
+Here are the endpoints that needs to be whitelisted from authentication :  
+* `"^/r/"`
+* `"^/js/"`,
+* `"^/img/"`,
+* `"^/css/"`,
+* `"^/lang/"`,
+* `"^/font/"`,
+* `"^/partial/"`,
+* `"^/download/"`,
+* `"^/upload"`,
+* `"^/guest/"`,
+* `"^/about"`,
+* `"^/delays$"`,
+* `"^/fulstats$"`
+
 ## Authors
 
 See [AUTHORS.md](AUTHORS.md) file.