Add concept of read-only endpoints and add configuration to block anything but read-only endpoints

aiidateam / aiida-restapi

AiiDA Web API for data queries and workflow management.

https://aiida-restapi.readthedocs.io

MIT License

9 stars 7 forks source link

Add concept of read-only endpoints and add configuration to block anything but read-only endpoints #63

Open sphuber opened 1 year ago

sphuber commented 1 year ago

Idea would be to have all mutating endpoints (PUT, POST and DELETE) return a 405 Method Not Allowed by default, unless a configuration option is explicitly set to allow mutations.