OAuth2 서버에서 비인증 요청 허용

기본적으로, when OAuth2 is enabled on Server Side, all the HTTP Requests 필요해요. 인증 using Bearer Tokens.

If you want allow some URLs to be accessed without the need of use a Bearer Token, you can use the event OnOAuth2BeforeRequest

Find below a sample code which shows the use of the event.

procedure OnOAuth2BeforeRequest(Sender: TObject; aConnection: TsgcWSConnection; aHeaders: TStringList; var Cancel: Boolean);
begin
  if DecodeGETFullPath(aHeaders) = '/Public.html' then
    Cancel := True
  else if DecodePOSTFullPath(aHeaders) = '/Form.html' then
    Cancel := True;  
end;