---
title: "Health Auth Config"
method: GET
path: "/health/auth-config"
tags: ["health"]
---

# Health Auth Config

`GET /health/auth-config`

## Request

- Base URL: `https://api.pointifytravels.com` (the document declares no server; this is the origin it was published from)
- URL: `https://api.pointifytravels.com/health/auth-config`
- Auth: none declared

Diagnostic probe for the auth pipeline.

Returns:
- whether SUPABASE_JWT_SECRET / SUPABASE_URL / SUPABASE_ANON_KEY /
  INTERNAL_API_KEY are populated (just the presence bit, never the
  value) so we can tell from outside whether the Hetzner env file
  has the keys our auth middleware depends on;
- what JWTAuthMiddleware decided about the current request —
  user_id (if populated, the first 8 chars as a sanity check) and
  auth_error (the failure reason string if any).

No secrets in the response. Exempt from ``InternalAuthMiddleware``
via the ``/health`` prefix allowlist so mobile/curl can reach it
without an internal key.

## Response `200`

Successful Response

- object

---

[API](https://skmtc.dev/pointifytravels/apis/pointify-deal-engine.md) · [All operations](https://skmtc.dev/pointifytravels/apis/pointify-deal-engine/llms.txt) · [OpenAPI document](https://skmtc.dev/pointifytravels/apis/pointify-deal-engine/revisions/4350142a4216?raw)