Add no_jwt_patterns to auth.proto

mixer/v1/config/client/auth.proto

@@ -146,6 +146,22 @@ message EndUserAuthenticationPolicySpec {
   // JWT validation is skipped if the user's traffic request does not
   // include a JWT.
   repeated JWT jwts = 2;
+
+  // This message defines a pattern to match a request.
+  // A pattern is matched only if both http_method and path_prefix are matched.
+  message Pattern {
+     // Define a HTTP method.
+     string http_method = 1;
+
+     // Defines a path prefix to match
+     string path_prefix = 2;
+  }
+
+  // If a request doesn't have JWT, it will be rejected.
+  // But some requests are OK without JWT, such as OPTIONS for CORS,
+  // or some paths for health checking.
+  // If a request matches any of no_jwt_patterns, it is OK without JWT.
+  repeated Pattern no_jwt_patterns = 3;
 }
 
 message EndUserAuthenticationPolicySpecReference {