Is an external page using the search API without authentication okay?

In response to a question on SuMo about being able to view permissions in search results, I created a sample page using the search API via XHR from the browser:

It’s ugly, but it seems to work.

I looked at the Authentication stuff on the docs (Authentication (External)) and I don’t understand it. In particular, when is it required? Do I need to think about it further for purposes of this search page?

Most of the API is public, so it doesn’t need authentication. Authentication is needed for things related to signing and user data like collections and reviews.

1 Like