EndpointAuthPolicy

Auth policy applied to incoming requests. Set on the parent `api` (default for all its endpoints) and optionally overridden per endpoint. Effective policy = `endpoint.auth ?? api.auth`. Spec: docs/endpoints.md §6.

Definition

TypeScript
type EndpointAuthPolicy =
  | { kind: "public"; rateLimitPerMinute?: number | undefined }
  | { kind: "workspace_api_key" }
  | { kind: "oauth"; scope: string }
  | { kind: "event_signature"; secretSource: "secret_ref"; secretId: string };

Fields

FieldTypeNotes
kind"public" | "workspace_api_key" | "oauth" | "event_signature"required