From 7406278a8a6c5efcdb2d0c59fca4bc09945a906a Mon Sep 17 00:00:00 2001 From: tahzeer Date: Thu, 3 Sep 2026 14:58:06 +0530 Subject: [PATCH] G2P-5618 Add geo endpoints to MASTER_DATA_CSRF_EXCLUDED_PATHS for server to server API calls between mds and registry for validations --- master-data-api/src/openg2p_gen2_master_data/main.py | 5 +++++ 1 file changed, 5 insertions(+) diff --git a/master-data-api/src/openg2p_gen2_master_data/main.py b/master-data-api/src/openg2p_gen2_master_data/main.py index b4276f6..4f2b332 100755 --- a/master-data-api/src/openg2p_gen2_master_data/main.py +++ b/master-data-api/src/openg2p_gen2_master_data/main.py @@ -35,6 +35,11 @@ # ambient credential to abuse — and these two endpoints only read. "/attributes/get_all_attributes", "/attributes/get_attribute_values", + # Same for geo reads: registry walks the hierarchy over REST instead of + # connecting to the master-data database, and those calls are also + # server-to-server with a Bearer token and no cookies. + "/geo/get_all_geo_levels", + "/geo/get_geo_level_values", ) # IAMInitializer after Settings.get_config() so iam-core middleware