From ce7cc71544037694c752724f05d697d1f27dd38f Mon Sep 17 00:00:00 2001
From: Michael Jumper <mike.jumper@guac-dev.org>
Date: Thu, 9 Oct 2014 16:25:31 -0700
Subject: [PATCH] GUAC-442: Only update authentication in specific requests.

---
 guacamole/src/main/webapp/WEB-INF/web.xml | 11 +++++++++--
 1 file changed, 9 insertions(+), 2 deletions(-)

diff --git a/guacamole/src/main/webapp/WEB-INF/web.xml b/guacamole/src/main/webapp/WEB-INF/web.xml
index e0b7ed579..0d5e76bde 100644
--- a/guacamole/src/main/webapp/WEB-INF/web.xml
+++ b/guacamole/src/main/webapp/WEB-INF/web.xml
@@ -37,14 +37,21 @@
         <listener-class>org.glyptodon.guacamole.net.basic.WebSocketSupportLoader</listener-class>
     </listener>
 
-    <!-- Authenticate against all requests -->
+    <!-- Authenticate against service calls and pages -->
     <filter>
         <filter-name>AuthenticatingFilter</filter-name>
         <filter-class>org.glyptodon.guacamole.net.basic.AuthenticatingFilter</filter-class>
     </filter>
     <filter-mapping>
         <filter-name>AuthenticatingFilter</filter-name>
-        <url-pattern>/*</url-pattern>
+        <url-pattern>*.xhtml</url-pattern>
+        <url-pattern>/login</url-pattern>
+        <url-pattern>/clipboard</url-pattern>
+        <url-pattern>/connections/*</url-pattern>
+        <url-pattern>/connectiongroups/*</url-pattern>
+        <url-pattern>/users/*</url-pattern>
+        <url-pattern>/permissions/*</url-pattern>
+        <url-pattern>/protocols/*</url-pattern>
     </filter-mapping>
 
     <!-- Restrict requests to the WebSocket tunnel -->