In older versions of ODL (e.g. Oxygen) we could configure this in aaa-app-config.xml to allow anonymous access (no user auth) to the topology URL:

    <urls>
        <pair-key>/operational/network-topology**</pair-key>
        <pair-value>anon</pair-value>
    </urls>

The same configuration does not work in recent ODL versions including master.