Remove authentication on manifest.json file (and favicon just in case)

server/http_server.ts

@@ -178,8 +178,10 @@ export class HttpServer {
   }
 
   private addPasswordAuth(app: Application) {
+    const excludedPaths = ["/manifest.json", "/favicon.png"];
     if (this.user) {
       app.use(async ({ request, response }, next) => {
+        if (!excludedPaths.includes(request.url.pathname)) {
           if (
             request.headers.get("Authorization") ===
               `Basic ${btoa(this.user!)}`
@@ -193,6 +195,10 @@ export class HttpServer {
             );
             response.body = "Unauthorized";
           }
+        } else {
+          // Unauthenticated access to excluded paths
+          await next();
+        }
       });
     }
   }