remove guards form list idp for integration api

2026-01-28 22:00:51 +00:00 · 2026-01-06 13:20:09 -05:00
parent f7fcde8312
commit 168ce549f7
1 changed files with 4 additions and 3 deletions
--- a/server/routers/integration.ts
+++ b/server/routers/integration.ts
@@ -751,9 +751,10 @@ authenticated.post(
 );

 authenticated.get(
-    "/idp",
-    verifyApiKeyIsRoot,
-    verifyApiKeyHasAction(ActionsEnum.listIdps),
+    "/idp", // no guards on this because anyone can list idps for login purposes
+    // we do the same for the external api
+    // verifyApiKeyIsRoot,
+    // verifyApiKeyHasAction(ActionsEnum.listIdps),
    idp.listIdps
 );