From 8dea8dfe7e20c3f9630bb6667ad811a83e137504 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Luis=20D=C3=ADaz?= <ldiazn98@gmail.com>
Date: Mon, 16 Feb 2026 10:29:46 +0100
Subject: [PATCH 1/2] Add anonymous credentials endpoints

---
 tf/modules/ooniapi_frontend/main.tf | 22 +++++++++++++++++++++-
 1 file changed, 21 insertions(+), 1 deletion(-)

diff --git a/tf/modules/ooniapi_frontend/main.tf b/tf/modules/ooniapi_frontend/main.tf
index 7f65233c..35ba73b3 100644
--- a/tf/modules/ooniapi_frontend/main.tf
+++ b/tf/modules/ooniapi_frontend/main.tf
@@ -339,6 +339,27 @@ resource "aws_lb_listener_rule" "ooniapi_ooniprobe_rule_2" {
   }
 }
 
+resource "aws_lb_listener_rule" "ooniapi_ooniprobe_rule_3" {
+  listener_arn = aws_alb_listener.ooniapi_listener_https.arn
+  priority     = 121
+
+  action {
+    type             = "forward"
+    target_group_arn = var.ooniapi_ooniprobe_target_group_arn
+  }
+
+  # anonymous credentials
+  condition {
+    path_pattern {
+      values = [
+        "/api/v1/manifest*",
+        "/api/v1/sign_credential*",
+        "/api/v1/submit_measurement/*"
+      ]
+    }
+  }
+}
+
 resource "aws_lb_listener_rule" "ooniapi_ooniprobe_rule_host" {
   listener_arn = aws_alb_listener.ooniapi_listener_https.arn
   priority     = 125
@@ -423,7 +444,6 @@ resource "aws_lb_listener_rule" "ooniapi_oonimeasurements_rule_1" {
   condition {
     path_pattern {
       values = [
-        # "/unimplemented"
         "/api/v1/measurements/*",
         "/api/v1/raw_measurement",
         "/api/v1/measurement_meta",

From e4619305367b3cfbaefe332617305ad468f2c53f Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Luis=20D=C3=ADaz?= <ldiazn98@gmail.com>
Date: Mon, 16 Feb 2026 10:42:37 +0100
Subject: [PATCH 2/2] change priority of anonc rules

---
 tf/modules/ooniapi_frontend/main.tf | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/tf/modules/ooniapi_frontend/main.tf b/tf/modules/ooniapi_frontend/main.tf
index 35ba73b3..d8ba5b87 100644
--- a/tf/modules/ooniapi_frontend/main.tf
+++ b/tf/modules/ooniapi_frontend/main.tf
@@ -341,7 +341,7 @@ resource "aws_lb_listener_rule" "ooniapi_ooniprobe_rule_2" {
 
 resource "aws_lb_listener_rule" "ooniapi_ooniprobe_rule_3" {
   listener_arn = aws_alb_listener.ooniapi_listener_https.arn
-  priority     = 121
+  priority     = 122
 
   action {
     type             = "forward"