WhiteRabbit-Code

What's the point of allowing authenticated calls only to robots.txt? The robots.txt is made for crawlers, but no crawler comes with an authenticated request.

I'm on the same side. The [Google openid-configuration](https://accounts.google.com/.well-known/openid-configuration) also lists https://oauth2.googleapis.com/token as `redeem_url` and https://accounts.google.com/o/oauth2/v2/auth as `login_url`. Furthermore, the [docs](https://developers.google.com/identity/sign-in/web/backend-auth#calling-the-tokeninfo-endpoint) specify https://oauth2.googleapis.com/tokeninfo as the current `validate_url`. I've set these URLs...

Hi all, we're experiencing the same issue when running DAB behind an Azure API Management. Can we add a config option to explicitly set the hostname and base-URL which are...

@regtm yes that is possible, but in my opinion just a workaround and not a nice solution