diff --git a/avni-server-api/src/main/java/org/avni/server/framework/security/AuthenticationFilter.java b/avni-server-api/src/main/java/org/avni/server/framework/security/AuthenticationFilter.java index e61c0c776..beacba034 100644 --- a/avni-server-api/src/main/java/org/avni/server/framework/security/AuthenticationFilter.java +++ b/avni-server-api/src/main/java/org/avni/server/framework/security/AuthenticationFilter.java @@ -58,7 +58,7 @@ protected void doFilterInternal(HttpServletRequest request, HttpServletResponse AuthTokenManager authTokenManager = AuthTokenManager.getInstance(); boolean isProtected = isProtected(request); - if (isProtected && ResourceProtectionStatus.isPresentIn(request, blacklistedUrls)) { + if (ResourceProtectionStatus.isPresentIn(request, blacklistedUrls)) { response.sendError(HttpServletResponse.SC_FORBIDDEN, String.format("%s is blacklisted for the implementation", request.getServletPath())); } else if (isProtected) { String derivedAuthToken = authTokenManager.getDerivedAuthToken(request, queryString);