fix(server): respond with 404/405 appropriately (#3087)

This adjusts the not found handler to not respond with a 404 on not found endpoints that are part of the /api or /.well-known folders, and respond with a 405 when the method isn't implemented.

Co-authored-by: Amir Zarrinkafsh <nightah@me.com>

1 files changed, 11 insertions, 0 deletions

diff --git a/internal/handlers/types.go b/internal/handlers/types.go
index e4670220e..33e096c25 100644
--- a/internal/handlers/types.go
+++ b/internal/handlers/types.go
@@ -1,6 +1,8 @@
 package handlers
 
 import (
+	"io"
+
 	"github.com/authelia/authelia/v4/internal/authentication"
 )
 
@@ -124,3 +126,12 @@ type PassworPolicyBody struct {
 	RequireNumber    bool   `json:"require_number"`
 	RequireSpecial   bool   `json:"require_special"`
 }
+
+type responseWriter interface {
+	SetStatusCode(statusCode int)
+	SetBodyString(body string)
+	SetBody(body []byte)
+	SetContentType(contentType string)
+	SetContentTypeBytes(contentType []byte)
+	SetBodyStream(bodyStream io.Reader, bodySize int)
+}