Problem/Motivation

Show only GET request in documentation

Steps to reproduce

When we provide access to Anonymous user to view the documentation path, all the JSON:API requests are visible, which must be restricted to GET request only.

Proposed resolution

Remaining tasks

User interface changes

API changes

Data model changes

Comments

Naresh G Pai created an issue. See original summary.

Naresh G Pai’s picture

ptmkenny’s picture

I don't understand the issue here. If you only want GET requests, you can restrict access at /admin/config/services/jsonapi. In fact, this is core's default setting-- GET only.

ptmkenny’s picture

Status: Active » Postponed (maintainer needs more info)