removed authorization header check

Author: Yannic Schröer

fastapi_auth_middleware/middleware.py

@@ -68,9 +68,6 @@ async def authenticate(self, conn: HTTPConnection) -> Tuple[AuthCredentials, Bas
         if conn.url.path in self.excluded_urls:
             return AuthCredentials(scopes=[]), "Unauthenticated User"
 
-        if "Authorization" not in conn.headers:
-            raise AuthenticationError("Authorization header missing")
-
         try:
             if inspect.iscoroutinefunction(self.verify_header):
                 scopes, user = await self.verify_header(conn.headers)

tests/test_middleware.py

@@ -69,9 +69,6 @@ def client_with_scopes(self) -> TestClient:
         app = fastapi_app(verify_header_basic_admin_scope)
         return TestClient(app)
 
-    def test_home_fail_no_header(self, client: TestClient):
-        assert client.get("/").status_code == 400
-
     def test_home_succeed(self, client: TestClient):
         assert client.get("/", headers={"Authorization": "ey.."}).status_code == 200