diff --git a/profiles/killbill/src/main/java/org/killbill/billing/server/security/TenantFilter.java b/profiles/killbill/src/main/java/org/killbill/billing/server/security/TenantFilter.java
index 3c6c6ce..7f2a2bb 100644
--- a/profiles/killbill/src/main/java/org/killbill/billing/server/security/TenantFilter.java
+++ b/profiles/killbill/src/main/java/org/killbill/billing/server/security/TenantFilter.java
@@ -131,6 +131,8 @@ public class TenantFilter implements Filter {
isTenantCreationRequest(path, httpMethod) ||
// Retrieve user permissions should not require tenant info since this is cross tenants
isPermissionRequest(path, httpMethod) ||
+ // Node request are cross tenant
+ isNodeCreationRequest(path, httpMethod) ||
// Metrics servlets
isMetricsRequest(path, httpMethod) ||
// See KillBillShiroWebModule#CorsBasicHttpAuthenticationFilter
@@ -157,6 +159,10 @@ public class TenantFilter implements Filter {
return JaxrsResource.TENANTS_PATH.equals(path) && "POST".equals(httpMethod);
}
+ private boolean isNodeCreationRequest(final String path, final String httpMethod) {
+ return JaxrsResource.NODES_INFO_PATH.equals(path) && "POST".equals(httpMethod);
+ }
+
private boolean isMetricsRequest(final String path, final String httpMethod) {
return KillbillGuiceListener.METRICS_SERVLETS_PATHS.contains(path) && "GET".equals(httpMethod);
}