remove root protection

I currently have the auth_openidc configured to protect everything at the root /*. However, there are routes that I do not want to protect. When I add the routes I want to protect & remove the /* protection, auth0 doesn’t challenge anymore at all, it’s like it only works at root. Here is how my locations are set currently:

   AuthType openid-connect
   Require valid-user
   LogLevel debug
   OIDCUnAuthAction 401



   AuthType openid-connect
   Require valid-user
   LogLevel debug

How can I configure auth_openidc so it protects only the routes I specify and not root?