api gateway - How to configure RedHat APIMan Authorization Policy for unprotected endpoints?

Question

We have installed and configured RedHat APIMan for our working API and the plan is migration form current home-grown tiny gateway to APIMan. The problem is that we have some unprotected endpoints which do not need login (Not everyone role! No login required at all). We are using Keycloak OAuth plugin for roles, and Authorization Policy for API security. When Authorization policy is not added, I can allow unauthenticated requests via a boolean value in Keycloak OAuth policy, but after adding Authorization policy, there is no way to let unauthenticated requests pass!

question from:https://stackoverflow.com/questions/65880487/how-to-configure-redhat-apiman-authorization-policy-for-unprotected-endpoints

Answer 1

Waitting for answers