breakfix: bypass URI not working about caddy-security HOT 8 CLOSED

bin/caddy fmt -overwrite /path/to/Caddyfile

order authenticate before respond
order authorize before basicauth

{
	http_port 8282
	https_port 4443
	order authenticate before respond
	order authorize before basicauth
	email "email"
	dynamic_dns {
		provider cloudflare API
		domains {
			website.com
		}
		check_interval 30m
		ip_source simple_http https://icanhazip.com
		ip_source simple_http https://api64.ipify.org
	}
	security {
		authentication portal myportal {
			crypto default token lifetime 86400
			cookie lifetime 172800
			cookie domain website.com
			backend local /config/auth/local/users2.json local
			ui {
				links {
					"Flame" https://flame.website.com/ icon "las la-star"
				}
			}
			transform user {
				match email "email"
				action add role authp/admin
			}
		}
		authorization policy admins_policy {
			bypass uri prefix /api
			bypass uri prefix /command
			bypass uri prefix /query
			bypass uri prefix /login
			bypass uri prefix /sync
			allow roles authp/admin
			set auth url https://auth.website.com/
			acl rule {
				comment default deny
				match any
				deny log warn
			}
		}
	}
}
(tls) {
	tls {
		issuer zerossl API{
			dns cloudflare API
			resolvers 1.1.1.1
		}
	}
}
(headers) {
	header {
		Strict-Transport-Security "max-age=31536000; includeSubDomains; preload"
		X-Frame-Options "SAMEORIGIN"
		X-Content-Type-Options "nosniff"
		Referrer-Policy "strict-origin"
		Content-Security-Policy "upgrade-insecure-requests"
		X-Robots-Tag "noindex, nofollow, nosnippet, noarchive"
	}
}

auth.website.com {
	log {
		output file /config/logs/access.log
		level WARN
	}
	import tls
	import headers
	route {
		authenticate with myportal
	}
}

flame.website.com {
	import tls
	encode zstd gzip
	import headers
	route {
		authorize with admins_policy
		reverse_proxy flame:5005
	}
}

radarr.website.com {
	import tls
	encode zstd gzip
	import headers
	route {
		authorize with admins_policy
		reverse_proxy radarr:7878
	}
}

sonarr.website.com {
	import tls
	encode zstd gzip
	import headers
	route {
		authorize with admins_policy
		reverse_proxy sonarr:8989
	}
}

prowlarr.website.com {
	import tls
	encode zstd gzip
	import headers
	route {
		authorize with admins_policy
		reverse_proxy prowlarr:9696
	}
}

qbit.website.com {
	import tls
	encode zstd gzip
	import headers
	route {
		authorize with admins_policy
		reverse_proxy qbittorrent:8080
	}
}

jellyfin.website.com {
	import tls
	import headers
	reverse_proxy jellynightly:8096 {
		flush_interval -1
	}
}

authentication portal myportal {
  crypto key sign-verify 39a7ed93-6341-4232-a4fe-c44d242eca7d
}

authorization policy admins_policy {
  crypto key verify 39a7ed93-6341-4232-a4fe-c44d242eca7d
}

			allow roles authp/admin
			acl rule {
				comment default deny
				match any
				deny log warn
			}

      acl rule {
        match role authp/admin
        allow stop log debug
      }
      acl rule {
        comment default deny
        match any
        deny log warn
      }

flame.website.com {
	import tls
	encode zstd gzip
	import headers
        authorize with admins_policy
	reverse_proxy flame:5005
}