From a359ba548ae81192159890cb01d7e34aae67d1fb Mon Sep 17 00:00:00 2001
From: Ferry Boender <ferry.boender@electricmonk.nl>
Date: Sun, 30 Apr 2017 09:51:44 +0200
Subject: [PATCH] Mention authentication exception for static file serving.

---
 doc/MANUAL.md | 2 ++
 src/webapp.py | 1 -
 2 files changed, 2 insertions(+), 1 deletion(-)

diff --git a/doc/MANUAL.md b/doc/MANUAL.md
index 2201c5d..4d39906 100644
--- a/doc/MANUAL.md
+++ b/doc/MANUAL.md
@@ -1077,6 +1077,8 @@ Scriptform does not provide the browser with a content-type of the file, since
 it is impossible to guess.  Generally, browsers do a decent job at figuring it
 out themselves.
 
+**Note**: Static file serving does not require authentication. All users,
+including anonymous users, can view static files.
 
 
 
diff --git a/src/webapp.py b/src/webapp.py
index a7da1ed..8da00a4 100644
--- a/src/webapp.py
+++ b/src/webapp.py
@@ -478,7 +478,6 @@ class ScriptFormWebApp(RequestHandler):
 
     def h_static(self, fname):
         """Serve static files"""
-        username = self.auth()
         form_config = self.scriptform.get_form_config()
 
         if not form_config.static_dir: