Closed akil-rails closed 2 months ago
The GET /api-registry works without any auth reference doc.
This means that anyone can access our api specification (if they obtain the registry-UUID in some way) . The api-registry should require access to the project like other APIs.
The GET /api-registry works without any auth reference doc.
This means that anyone can access our api specification (if they obtain the registry-UUID in some way) . The api-registry should require access to the project like other APIs.