Is an external page using the search API without authentication okay?

(jscher2000) #1

In response to a question on SuMo about being able to view permissions in search results, I created a sample page using the search API via XHR from the browser:

It’s ugly, but it seems to work.

I looked at the Authentication stuff on the docs (Authentication (External)) and I don’t understand it. In particular, when is it required? Do I need to think about it further for purposes of this search page?

(Jorge) #2

Most of the API is public, so it doesn’t need authentication. Authentication is needed for things related to signing and user data like collections and reviews.