Add: allos routes to not require authorization

1 files changed, 2 insertions, 4 deletions

diff --git a/apifw.yarn b/apifw.yarn
index 3df47c4..3e69c38 100644
--- a/apifw.yarn
+++ b/apifw.yarn
@@ -24,13 +24,11 @@ It's a silly name. Please suggest something better.
     GIVEN a running apitest using gunicorn3
 
     WHEN client requests GET /version without token
-    THEN HTTP status code is 401 Unauthorized
-    AND response has header WWW-Authenticate containing "Bearer"
+    THEN HTTP status code is 200 OK
 
     WHEN client gets an authorization token with scope "no_version_scope"
     AND client requests GET /version using token
-    THEN HTTP status code is 401 Unauthorized
-    AND response has header WWW-Authenticate containing "Bearer"
+    THEN HTTP status code is 200 OK
 
     WHEN client gets an authorization token with scope "uapi_version_get"
     AND client requests GET /version using token