Allow access to change hooks always, don't redirect from /api

Signed-off-by: magic_rb <[email protected]>

Author: MagicRB

buildbot_nix/oauth2_proxy_auth.py

@@ -19,7 +19,7 @@
 class OAuth2ProxyAuth(AuthBase):
     header: ClassVar[bytes] = b"Authorization"
     prefix: ClassVar[bytes] = b"Basic "
-    user_info_provider: UserInfoProviderBase
+    user_info_provider: UserInfoProviderBase = None
     password: bytes
 
     def __init__(self, password: str, **kwargs: Any) -> None:

nix/master.nix

@@ -800,6 +800,11 @@ in
             upstream = "http://127.0.0.1:${builtins.toString config.services.buildbot-master.port}";
 
             cookie-secure = true;
+            skip-auth-route = [ "^/change_hook" ];
+            api-route = [
+              "^/api"
+              "^/ws$"
+            ];
           }
           (lib.mkIf (cfg.authBackend == "httpbasicauth") { set-basic-auth = true; })
           (lib.mkIf