Disallow x-varnish-token validation (#14)

TheColvinCo · Mar 30, 2021 · 61f30f1 · 61f30f1
1 parent 3e3dfa3
commit 61f30f1
Showing 1 changed file with 3 additions and 3 deletions.
diff --git a/varnish/conf/default.vcl b/varnish/conf/default.vcl
@@ -20,9 +20,9 @@ sub vcl_recv {
  unset req.http.forwarded;
  # To allow API Platform to ban by cache tags
  if (req.method == "BAN") {
- if (req.http.x-varnish-token != std.getenv("VARNISH_PURGE_TOKEN")) {
- return (synth(405, "Not allowed"));
- }
+# if (req.http.x-varnish-token != std.getenv("VARNISH_PURGE_TOKEN")) {
+# return (synth(405, "Not allowed"));
+# }
  if (req.http.ApiPlatform-Ban-Regex) {
  ban("obj.http.Cache-Tags ~ " + req.http.ApiPlatform-Ban-Regex);
  return (synth(200, "Ban added"));