private boolean shouldBypassAuthentication(final HttpServletRequest servletRequest,
                                               final String fullPath,
                                               final String servletPath,
                                               final String servletName) {
        final boolean shouldBypass;
        if (servletPath == null) {
            shouldBypass = false;
        } else {
            shouldBypass = authenticationBypassChecker.isUnauthenticated(servletName, servletPath, fullPath);
        }

        if (LOGGER.isDebugEnabled()) {
            if (shouldBypass) {
                LOGGER.debug("Bypassing authentication for servletName: {}, fullPath: {}, servletPath: {}",
                        NullSafe.get(
                                servletRequest.getHttpServletMapping(),
                                HttpServletMapping::getServletName),
                        fullPath,
                        servletPath);
            }
        }
        return shouldBypass;
    }
<p>
Filter to avoid posts to the wrong place (e.g. the root of the app)
</p>
stroom-proxy/stroom-proxy-app/src/main/java/stroom/proxy/app/servlet/ProxySecurityFilter.java