message: Require valid bearer token when listing CRDs or namespaces.
diff: @@ -146,6 +146,8 @@ func (s *Server) HTTPHandler() http.Handler {
  useVersionHandler := s.versionHandler
  useValidateLicenseHandler := s.validateLicenseHandler
  + useListNamespaces := s.handleListNamespaces
  + useListCRDs := s.handleListCRDs
  useCertsHandler := s.certsHandler
  useClientsHandler := s.handleListClients
  useTokenRevocationHandler := s.handleTokenRevocation
  @@ -153,6 +155,8 @@ func (s *Server) HTTPHandler() http.Handler {
  if !s.AuthDisabled() {
  useVersionHandler = authMiddleware(s.Auther, http.HandlerFunc(s.versionHandler))
  useValidateLicenseHandler = authMiddleware(s.Auther, http.HandlerFunc(s.validateLicenseHandler))
  + useListNamespaces = authMiddleware(s.Auther, http.HandlerFunc(s.handleListNamespaces))
  + useListCRDs = authMiddleware(s.Auther, http.HandlerFunc(s.handleListCRDs))
  useCertsHandler = authMiddleware(s.Auther, http.HandlerFunc(s.certsHandler))
  useClientsHandler = authMiddleware(s.Auther, http.HandlerFunc(s.handleListClients))
  useTokenRevocationHandler = authMiddleware(s.Auther, http.HandlerFunc(s.handleTokenRevocation))
  @@ -161,8 +165,8 @@ func (s *Server) HTTPHandler() http.Handler {
  handleFunc("/version", useVersionHandler)
  handleFunc("/license/validate", useValidateLicenseHandler)
  handleFunc("/tectonic/ldap/validate", handleLDAPVerification)
  - handleFunc("/api/tectonic/namespaces", s.handleListNamespaces)
  - handleFunc("/api/tectonic/crds", s.handleListCRDs)
  + handleFunc("/api/tectonic/namespaces", useListNamespaces)
  + handleFunc("/api/tectonic/crds", useListCRDs)
  mux.HandleFunc("/tectonic/certs", useCertsHandler)
  mux.HandleFunc("/tectonic/clients", useClientsHandler)
  mux.HandleFunc("/tectonic/revoke-token", useTokenRevocationHandler)
  