Exclude basic authentication for specific URL

Support
,
1

I am trying to exclude a particular URL from basic authentication that is setup site-wide. Below is my config. I have a rewrite to index.html and to french.html based on query param for all routes except the /apple-app-site-association route which works. The basic auth works as well however I am unable to exclude it from behind the auth. I need help in figuring out excluding the /apple-app-site-association route from Auth. Is it order that is incorrect or the value of header?

[build]
  command = "npm run build && npm run export"
  publish = "out"

[[headers]]
  for = "/apple-app-site-association"
  [headers.values]
    Basic-Auth = ""

[[headers]]
  for = "/*"
  [headers.values]
    Basic-Auth = "someuser:pass"

[[redirects]]
  from = "/apple-app-site-association"
  to = "/apple-app-site-association.json"
  status = 200

[[redirects]]
  from = "/*"
  query = {lang = "fr"}
  to = "/french.html"
  force = true
  status = 200

[[redirects]]
  from = "/*"
  to = "/index.html"
  status = 200
2

Hey @crowdlinker,

Not good news, I’m afraid! Unfortunately, with the way auth works, you’ll need to specify all routes which require auth, rather than omit those which don’t.