Skip to content

Commit

Permalink
chore: make security optional for /edge/validate endpoint (#5739)
Browse files Browse the repository at this point in the history
We've had a couple of misunderstandings from people surprised that
Unleash allows posts against the `/edge/validate` endpoint without an
API key. It is intentional that this endpoint does not require an
Authorization header, so this PR updates our OpenAPI spec to clarify
that there is no security required for `/edge/validate`
  • Loading branch information
Christopher Kolstad committed Jan 2, 2024
1 parent 3a7824a commit 1fd233a
Showing 1 changed file with 1 addition and 0 deletions.
1 change: 1 addition & 0 deletions src/lib/routes/edge-api/index.ts
Expand Up @@ -63,6 +63,7 @@ export default class EdgeController extends Controller {
middleware: [
this.openApiService.validPath({
tags: ['Edge'],
security: [{}],
summary: 'Check which tokens are valid',
description:
'This operation accepts a list of tokens to validate. Unleash will validate each token you provide. For each valid token you provide, Unleash will return the token along with its type and which projects it has access to.',
Expand Down

0 comments on commit 1fd233a

Please sign in to comment.