[Security Alert]: Not all endpoints require authentication even when explicitly enabled

Checklist

• The issue exists after disabling all extensions
• The issue exists on a clean installation of webui
• The issue is caused by an extension, but I believe it is caused by a bug in the webui
• The issue exists in the current version of the webui
• The issue has not been reported before recently
• The issue has been reported before but has not been fixed yet

What happened?

Some manually added endpoints such as /internal/sysinfo can still be called even when authentication is meant to be enforced by Gradio.

Steps to reproduce the problem

1. Enable Gradio based authentication
2. Open http://127.0.0.1/internal/sysinfo in an incognito browser window
3. Notice how it still returns system information even when authentication is enabled.

What should have happened?

It should have required the user to be signed in to return that information.

What browsers do you use to access the UI ?

Mozilla Firefox

Sysinfo

sysinfo-2025-00-00-00-00.json

Console logs

N/A

Additional information

No response