From 99574d941c456a6c63fc8c642fe379a4f5a5c1ed Mon Sep 17 00:00:00 2001
From: Zak Burke <zburke@ebsco.com>
Date: Tue, 24 Oct 2023 06:52:21 -0400
Subject: [PATCH] omit endpoints that require AT from list of pass-through
 endpoints

---
 src/service-worker.js | 4 +---
 1 file changed, 1 insertion(+), 3 deletions(-)

diff --git a/src/service-worker.js b/src/service-worker.js
index 5054355c5..d034a18ef 100644
--- a/src/service-worker.js
+++ b/src/service-worker.js
@@ -185,7 +185,7 @@ export const rtr = async (event) => {
 
 /**
  * isPermissibleRequest
- * Some requests are always permissible, e.g. auth-n and token-rotation.
+ * Some requests are always permissible, e.g. auth-n and forgot-password.
  * Others are only permissible if the Access Token is still valid.
  *
  * @param {Request} req clone of the original event.request object
@@ -199,8 +199,6 @@ export const isPermissibleRequest = (req, te, oUrl) => {
   }
 
   const permissible = [
-    '/authn/refresh',
-    '/bl-users/_self',
     '/bl-users/forgotten/password',
     '/bl-users/forgotten/username',
     '/bl-users/login-with-expiry',