From 6fed04c93c22d4b4fb7658add4259bd5c01cf88f Mon Sep 17 00:00:00 2001
From: Elliott Balsley <3991046+llamafilm@users.noreply.github.com>
Date: Fri, 14 Mar 2025 19:44:04 -0700
Subject: [PATCH] skip login for API requests when using REMOTE_AUTH_HEADER

---
 netbox/netbox/middleware.py | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/netbox/netbox/middleware.py b/netbox/netbox/middleware.py
index b9424bd7c..d8511fa05 100644
--- a/netbox/netbox/middleware.py
+++ b/netbox/netbox/middleware.py
@@ -153,6 +153,10 @@ class RemoteUserMiddleware(RemoteUserMiddleware_):
                 user.email = request.META[settings.REMOTE_AUTH_USER_EMAIL]
             user.save()
 
+            if request.META['PATH_INFO'].startswith('/api/'):
+                # Skip login because API requests are authenticated by custom header
+                return
+
             # Set request.user and persist user in the session
             # by logging the user in.
             request.user = user