diff --git a/website_require_login/models/ir_http.py b/website_require_login/models/ir_http.py
index 455f15851f..b0b0964770 100644
--- a/website_require_login/models/ir_http.py
+++ b/website_require_login/models/ir_http.py
@@ -33,6 +33,8 @@ def _require_login_whitelist_paths(cls):
             # are needed to correctly render the login page
             "/web",
             "/website/translations",
+            "/jsonrpc",
+            "/xmlrpc",
         ]
 
     @classmethod
diff --git a/website_require_login/tests/test_ir_http.py b/website_require_login/tests/test_ir_http.py
index 61a6cbbbe8..9de37182ca 100644
--- a/website_require_login/tests/test_ir_http.py
+++ b/website_require_login/tests/test_ir_http.py
@@ -60,6 +60,9 @@ def test_authorize_everything(self):
             "/contactus": "/web/login?redirect=/contactus",
             asset_attachment.url: asset_attachment.url,
             "/web/login": "/web/login",
+            "/jsonrpc": "/jsonrpc",
+            "/xmlrpc/2/common": "/xmlrpc/2/common",
+            "/xmlrpc/2/object": "/xmlrpc/2/object",
         }
 
         # Assert