From abbe63695be72508bbd489b0dcec189dfc66122f Mon Sep 17 00:00:00 2001
From: Tessa Walsh <tessa@bitarchivist.net>
Date: Tue, 13 Feb 2024 12:20:52 -0500
Subject: [PATCH] Add '*,' as wildcard to match all URLs/TLDs in ACls

---
 pywb/warcserver/access_checker.py | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/pywb/warcserver/access_checker.py b/pywb/warcserver/access_checker.py
index 46cd7acd9..a5fc83356 100644
--- a/pywb/warcserver/access_checker.py
+++ b/pywb/warcserver/access_checker.py
@@ -260,6 +260,10 @@ def find_access_rule(self, url, ts=None, urlkey=None, collection=None, acl_user=
             if key.startswith(acl_key):
                 acl_obj = CDXObject(acl)
 
+            # Check for "*," in ACL, which matches any URL
+            if acl_key == b"*,":
+                acl_obj = CDXObject(acl)
+
             if acl_obj:
                 user = acl_obj.get('user')
                 if user == acl_user: