Allow to query to index time endpoint without token

Signed-off-by: Bernát Gábor <[email protected]>

Author: gaborbernat

opengrok-web/src/main/java/org/opengrok/web/api/v1/filter/IncomingFilter.java

@@ -73,7 +73,7 @@ public class IncomingFilter implements ContainerRequestFilter, ConfigurationChan
     private static final Set<String> allowedPaths = new HashSet<>(Arrays.asList(
             SearchController.PATH, SuggesterController.PATH, SuggesterController.PATH + "/config",
             HistoryController.PATH, FileController.PATH, AnnotationController.PATH,
-            SystemController.PATH + "/ping"));
+            SystemController.PATH + "/ping", SystemController.PATH + "/indextime" ));
 
     @Context
     private HttpServletRequest request;

opengrok-web/src/test/java/org/opengrok/web/api/v1/filter/IncomingFilterTest.java

@@ -243,4 +243,9 @@ void systemPathDescWithoutTokenTest() throws Exception {
 
         assertEquals(Response.Status.UNAUTHORIZED.getStatusCode(), captor.getValue().getStatus());
     }
+
+    @Test
+    void systemIndexTimeRemoteWithoutTokenTest() throws Exception {
+        assertFilterDoesNotBlockAddress("10.0.0.1", "system/indextime");
+    }
 }