Skip to content

Protect the API, allow access to API documentation

Ingo Pfennigstorf requested to merge api_secure into main

This requires a logged in user to access the API via GET (ROLE_USER) and a ROLE_ADMIN to access ist with PUT/POST/DELETE.

To avoid confusion the main page when calling / is redirected to /api/docs instead of /api.

Merge request reports