Miserlou / Zappa

Serverless Python
https://blog.zappa.io/
MIT License
11.89k stars 1.2k forks source link

API Key Authentication applies to documentation too #1615

Open kellersyf opened 6 years ago

kellersyf commented 6 years ago

Context

When I enable API Key Authentication, the API is authenticated as expected. Unfortunately, the docs are also authenticated. Since I can't (without extensions) add the API key to the header for my browser, I can't see the docs.

Expected Behavior

I should be able to browse docs without an API key.

Actual Behavior

Everything is authenticated including the docs.

Possible Fix

If this is intended, add an option to authenticate (or not) documentation.

Steps to Reproduce

  1. Create a project with api_key_required = true
  2. Deploy project
  3. Browse to the API Gateway URL for documentation using any web browser without special settings to change header.
  4. Receive "Forbidden" response.

Your Environment

kellersyf commented 5 years ago

Is there any additional information I can provide on this issue? Anything I can do to help?