ByPass Mod Auth OpenIdc from other clients

[JonEasy]

Hi,

I have enabled mod_auth_openidc on apache for a web SPA. All requests from the web are being proxypass to the protected resource sitting on an instance.

However now I have a local command line application that has its own authentication process and wants to make GET requests to the same protected resource server.

I have added the following directive

        <Location "/cli">
                AuthType none
                RewriteRule ^/cli/(.*)$ http://localhost:9001/api/$1 [P]
                Require all granted
        </Location>

My idea is that all calls from my local application do not get authenticated from apache and can get through the server. Bear in mind that all requests contain a Bearer token already. When I test it with Postman I get returning the authentication page though...