Merge pull request #144 from hydroserver2/23-site-details-guest-access

Removed auth check for metadata endpoint.
hydroserver2 · Oct 18, 2023 · 7f229f4 · 7f229f4
2 parents f0ed2f2 + 74371c3
commit 7f229f4
Showing 1 changed file with 1 addition and 2 deletions.
diff --git a/core/endpoints/thing/views.py b/core/endpoints/thing/views.py
@@ -318,7 +318,7 @@ def update_thing_privacy(request, data: ThingPrivacyPatchBody, thing_id: UUID =
 
 @router.get(
     '{thing_id}/metadata',
-    auth=[JWTAuth(), BasicAuth()],
+    auth=[JWTAuth(), BasicAuth(), anonymous_auth],
     response={
         200: ThingMetadataGetResponse,
         401: str,
@@ -338,7 +338,6 @@ def get_thing_metadata(request, thing_id: UUID = Path(...)):
     thing = get_thing_by_id(
         user=request.authenticated_user,
         thing_id=thing_id,
-        require_ownership=True,
         raise_http_errors=True
     )