Page MenuHomePhabricator

Restrict API access to RESTBase
Closed, DeclinedPublic

Description

We probably don't want external clients to call this API directly, so we need a mechanism to restrict API access to RESTBase. This could be network configuration, or a form of authentication, or preferably both.

Event Timeline

eprodromou closed this task as Declined.Nov 6 2019, 3:18 PM
eprodromou added a subscriber: eprodromou.

I think this is handled just by the way our network works. We'll need to figure it out long-term based if and when Parsoid/PHP comes to the main MediaWiki servers.