Extend public access roles for three API end-points

[melroy89]

When the server is in "Force users to login before they can access any content" mode, still allow the following 3 API end-points to be accessible for requests. Which is also used for: https://joinmbin.org/servers

• /api/info
• /api/instance
• /api/defederate

[BentiGorlich]

maybe also add the federated and dead routes?

[melroy89]

maybe also add the federated and dead routes?

yes I think so as well.

[melroy89]

Your review is now auto dismissed 😢

[jwr1]

So, then should we make the corresponding web pages public as well? Like the about, privacy policy, faq, terms, federation page, etc.

[melroy89]

So, then should we make the corresponding web pages public as well? Like the about, privacy policy, faq, terms, federation page, etc.

Some of these makes sense yes. Especially about, privacy policy, and terms.

[jwr1]

Well, all the ones I listed are now public through the API, right? So, the corresponding web pages should be made public as well.

[melroy89]

Well, all the ones I listed are now public through the API, right? So, the corresponding web pages should be made public as well.

Yes, only as long as there is a Twig caching in place for these pages. So the impact on the server-side should be minimal.